Analysis
-
max time kernel
154s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04/12/2022, 14:28
General
-
Target
dc9388d9cdabe8638e82a692cc93d6e7f04550c17ab414766d31eff7867ab27b.exe
-
Size
64KB
-
MD5
10d7419f017f67211f87ac6082a9552e
-
SHA1
36e06c58dad5cb11c72c6e40112a44372dc11e2d
-
SHA256
dc9388d9cdabe8638e82a692cc93d6e7f04550c17ab414766d31eff7867ab27b
-
SHA512
4dfd782d3dee0534c919cd4685172f97fb1b7adeee27d0e7da05819c17246576a2b701bff4107b4a1a5afe69aab2b8eb8b708b326d50301f05997a7b6a696a4a
-
SSDEEP
1536:KMu7XK1u5vRZ4qTGdplkuLdcycvclGJxRtO2oy3:KfbSup4ZkuLdJcIYftcy3
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc9388d9cdabe8638e82a692cc93d6e7f04550c17ab414766d31eff7867ab27b.exe"C:\Users\Admin\AppData\Local\Temp\dc9388d9cdabe8638e82a692cc93d6e7f04550c17ab414766d31eff7867ab27b.exe"1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx