Analysis
-
max time kernel
151s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06/12/2022, 22:23
General
-
Target
ac8b5a2b1dbc737456ed1d767ea81ad00815821dd62f31207aa5a81267f335ea.exe
-
Size
1.2MB
-
MD5
d6bf2fd35e251771445f0d1ca3f65461
-
SHA1
c7e85cba55a5d5e8ca499acc695b2f1da28e28e4
-
SHA256
ac8b5a2b1dbc737456ed1d767ea81ad00815821dd62f31207aa5a81267f335ea
-
SHA512
34a4ecd0f7f9c7ee3fd985125110f6c3818e378d08711ee7cb360c24df5cb2208258a92f8cf59c753ffb0a373da6fab3bdd6a39495e4c020000006d07727791f
-
SSDEEP
24576:9Bp04M6agHNF70OthT+3FB0okCUEAvbVXGyT7FhCE3Ude5iVlnP/9mbg4:9BC4M6agH0OthS3gzNB74eAVVP/C3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac8b5a2b1dbc737456ed1d767ea81ad00815821dd62f31207aa5a81267f335ea.exe"C:\Users\Admin\AppData\Local\Temp\ac8b5a2b1dbc737456ed1d767ea81ad00815821dd62f31207aa5a81267f335ea.exe"1⤵