Analysis
-
max time kernel
103s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
04/12/2022, 14:27
General
-
Target
fec46c08be499a226e6f996c49bc03077a1e7f59c61e77501bdfa5bd31fa7333.exe
-
Size
120KB
-
MD5
8344b0e9ae9ea7f61cd8abb7d99ebf72
-
SHA1
6d4b2b2f03fe0372faf9f60b94200ac79384980d
-
SHA256
fec46c08be499a226e6f996c49bc03077a1e7f59c61e77501bdfa5bd31fa7333
-
SHA512
05d82e358e492d58655e2054656b2265aa5af2dfecb4f02744d30f6edbc83becfaea254e8852d4172fea12b95a57140e4750c7c53b3bdc1f7924ad53329247c2
-
SSDEEP
3072:PvkHeR+EF6hdn80q/RLe4Bz3KS1NicEx1Tn7PRBf:PcHeR+Y6YwQKS1McExtnNV
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fec46c08be499a226e6f996c49bc03077a1e7f59c61e77501bdfa5bd31fa7333.exe"C:\Users\Admin\AppData\Local\Temp\fec46c08be499a226e6f996c49bc03077a1e7f59c61e77501bdfa5bd31fa7333.exe"1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx