Analysis
-
max time kernel
104s -
max time network
2s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05/12/2022, 06:48
General
-
Target
c57efdf88b62acd6d29a9982bb332e0b62a2adb2e9f4063489295a6d253edefd.exe
-
Size
1.8MB
-
MD5
2015735256f2b0b8701060903186c8b6
-
SHA1
2ffb24987ec5cea32ee6c245ba820243fb8a8db8
-
SHA256
c57efdf88b62acd6d29a9982bb332e0b62a2adb2e9f4063489295a6d253edefd
-
SHA512
69815e9083a17dafb6079e0c4aba59bcb7a912a9953b6fd827b14aa4f6a29f315462b7032d09be02d2d2530f9ea3c8a49e9b4f562ae0f9bc8783d2e5ab7d1bf5
-
SSDEEP
24576:7N7G7N8ACfDKjg16jeYpNwb94ov744BZsxuUuBodlOMSPCWs4c:GQdkTwb6S744B+uxBodlOXPCR4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c57efdf88b62acd6d29a9982bb332e0b62a2adb2e9f4063489295a6d253edefd.exe"C:\Users\Admin\AppData\Local\Temp\c57efdf88b62acd6d29a9982bb332e0b62a2adb2e9f4063489295a6d253edefd.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB