Analysis
-
max time kernel
186s -
max time network
200s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 21:01
General
-
Target
803fea67706833799ddb9d1a22c4bce02e1fbc691c08abded4b4e9977dfa3555.exe
-
Size
1.7MB
-
MD5
dd1611609b0f092c4ced336ff59a2b8e
-
SHA1
94a13af3d2dcf79fc0a571992dd11e0d29894a41
-
SHA256
803fea67706833799ddb9d1a22c4bce02e1fbc691c08abded4b4e9977dfa3555
-
SHA512
0e0782fc6279298661bf83d02f96eb0965c2cb746d7fa9b27d74262f2c6972490d55914129148c33cbf6b95633a7b76eed6758262cfe0c4e022d0a0b33bc844e
-
SSDEEP
49152:3t6B0IsJ42tq0JunN+h4+ir9JvQSD3eF1dak7b+xUH831N:3UB5cJunP1r9pDqrak7bKUc33
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\803fea67706833799ddb9d1a22c4bce02e1fbc691c08abded4b4e9977dfa3555.exe"C:\Users\Admin\AppData\Local\Temp\803fea67706833799ddb9d1a22c4bce02e1fbc691c08abded4b4e9977dfa3555.exe"1⤵