Analysis
-
max time kernel
170s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-12-2022 21:01
General
-
Target
c0726233e341cbe0298576426e55813bc95e923e6e9e39968f487d47abe74fb9.exe
-
Size
897KB
-
MD5
63d31417ba3788250dd5b5590fcbdb73
-
SHA1
220ef0e473e82a1f55b9a6baae4f5d34042b0b63
-
SHA256
c0726233e341cbe0298576426e55813bc95e923e6e9e39968f487d47abe74fb9
-
SHA512
b8eb06f716d5aa1feacb9030cd65bd19137f8cf3418476c8c33bc938ae4709680b010a051f1e5674d95344337eada7f86c2d79248c2b59e67ead507a06a9744e
-
SSDEEP
24576:zT4UlN/tmNqer2JXNOuF77pGJsb2tHT0WMbemlOQGw:TqrC8GHYJsCtHT0xLd
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0726233e341cbe0298576426e55813bc95e923e6e9e39968f487d47abe74fb9.exe"C:\Users\Admin\AppData\Local\Temp\c0726233e341cbe0298576426e55813bc95e923e6e9e39968f487d47abe74fb9.exe"1⤵