Analysis
-
max time kernel
194s -
max time network
217s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05-12-2022 20:58
General
-
Target
99813868607b3c757a8067f9b15e047eb56cb3db9020dcc358d055118cb4443d.exe
-
Size
4.8MB
-
MD5
469fc3c649234ac1e6bd687c2d70a0ed
-
SHA1
aa8c203cf7dbb4e4d5eef6779b34bff74858c81b
-
SHA256
99813868607b3c757a8067f9b15e047eb56cb3db9020dcc358d055118cb4443d
-
SHA512
21846f45c84e2c6ee3f8c81267b6b5b5de5f3f35d92897c25bc34af599532b3882577e2dea6d1b50d8033f5167fa513965e125ae4a597bb34173e5752e0cbd42
-
SSDEEP
98304:JZFa22tHVKorknWJWzCmmp0Hyg43+2GrHSXI/RF5teSiWbuXqvv/:J/abVnrc1CJp0HK+BrHSXIHeSJaXW/
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\99813868607b3c757a8067f9b15e047eb56cb3db9020dcc358d055118cb4443d.exe"C:\Users\Admin\AppData\Local\Temp\99813868607b3c757a8067f9b15e047eb56cb3db9020dcc358d055118cb4443d.exe"1⤵