Analysis
-
max time kernel
152s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-12-2022 23:05
General
-
Target
951834f472259cb4090f518104d958e2aed027e197c2a55792127c2ad8007c13.exe
-
Size
207KB
-
MD5
05de535daf0e69905d34cfae37fba4b7
-
SHA1
f39d5784a4821e1452493793d49737610e036017
-
SHA256
951834f472259cb4090f518104d958e2aed027e197c2a55792127c2ad8007c13
-
SHA512
845256882bcc8ac60c330ed374bc8e41e099e20e3c3ff0d2b0e78b5c1431cb96b189b65d795ab96fcea0ec27690d053ee684123b2b436882cc077c96143b99c0
-
SSDEEP
6144:Ywrsev0/dWhPZvOIzQC+3HfJEjZxBUhDGLuX:NPkdQzy3/JEjjBUY8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\951834f472259cb4090f518104d958e2aed027e197c2a55792127c2ad8007c13.exe"C:\Users\Admin\AppData\Local\Temp\951834f472259cb4090f518104d958e2aed027e197c2a55792127c2ad8007c13.exe"1⤵