Analysis
-
max time kernel
145s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-12-2022 02:37
General
-
Target
cbcebe1a9665733af7cd973e2c70e4a31ff330972c212d3c1f7baff3ffd48937.exe
-
Size
80KB
-
MD5
d797a4828c3a0e211bdd71a9e50466ef
-
SHA1
fe103d29fb3b75014049554d8039d1fe4fe0253f
-
SHA256
cbcebe1a9665733af7cd973e2c70e4a31ff330972c212d3c1f7baff3ffd48937
-
SHA512
9b71a624a409c08bdea82dac66dc368a647853eeccf33aa8595bcb3897bf6ab76f6409f298a7cd1cacda647f9f52c76f0babbc55524880d1a806abcb32907a26
-
SSDEEP
1536:vPx/CJAmx2/W5Ebnto4tmJNKxsfs0CJh6EZYR34hMlb4fzm:nx6UW6tpmJ9sjyR3fr
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cbcebe1a9665733af7cd973e2c70e4a31ff330972c212d3c1f7baff3ffd48937.exe"C:\Users\Admin\AppData\Local\Temp\cbcebe1a9665733af7cd973e2c70e4a31ff330972c212d3c1f7baff3ffd48937.exe"1⤵