Analysis
-
max time kernel
188s -
max time network
232s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
04/12/2022, 13:27
General
-
Target
eb0460e9770a626e8205bf0dbd3d581787df282abeb30295bfe798d5ac9c91e6.exe
-
Size
273KB
-
MD5
227c4ae897ee9d2524504091c7a58608
-
SHA1
c0922a1c9bb4325d28d6dd4fceb291a3359080d7
-
SHA256
eb0460e9770a626e8205bf0dbd3d581787df282abeb30295bfe798d5ac9c91e6
-
SHA512
7169e9d5a453e60ed0dfd6916aaa74c58aa5fa09e5ed8e67facd7ef0345e207b6e549246a9168b50bc6af8ba7ffb86541be207c545946e8a7f6ce75aa9b0b7a3
-
SSDEEP
6144:lhRR5uYDhtyvIve3RfKCydXb4koTph35CL53kzy+:Vu2mjhYyT735Ct3u
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb0460e9770a626e8205bf0dbd3d581787df282abeb30295bfe798d5ac9c91e6.exe"C:\Users\Admin\AppData\Local\Temp\eb0460e9770a626e8205bf0dbd3d581787df282abeb30295bfe798d5ac9c91e6.exe"1⤵