Analysis
-
max time kernel
306s -
max time network
358s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05-12-2022 08:02
General
-
Target
4246008da17370ad7c33a9b9d4c1406b76e7ea5b92d3aaebb022fe98be1d1055.exe
-
Size
609KB
-
MD5
ca1fffc3f9fe24ccc4f143a62e570712
-
SHA1
e7db9f0655f9eaa7dd243c20ee94f5463ba75165
-
SHA256
4246008da17370ad7c33a9b9d4c1406b76e7ea5b92d3aaebb022fe98be1d1055
-
SHA512
ddc8ca6c3e57b32d7f205341b94cedbaf3ab9fab63ad77802babaec250b3b1d7a89eb86fd37ff14f303a78507f9f3073ec1cb43a0199035163e0634d04fe3d94
-
SSDEEP
12288:my7U3urTDV/Omeo8huhYO7ZPtCXYMgin0sYKnGL07tWRYKBT7tSyape:my7UMZ/OV0v7RQ/1n0BKa0I6KR2A
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4246008da17370ad7c33a9b9d4c1406b76e7ea5b92d3aaebb022fe98be1d1055.exe"C:\Users\Admin\AppData\Local\Temp\4246008da17370ad7c33a9b9d4c1406b76e7ea5b92d3aaebb022fe98be1d1055.exe"1⤵