Analysis
-
max time kernel
187s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/12/2022, 02:09
General
-
Target
56cbf7367154f0559d611c7ac6d32ac9bf9da7caba86534e11fab3b85d0c2611.exe
-
Size
1.8MB
-
MD5
a44b3e964aeeeaa02d43b1ba3cfe5965
-
SHA1
82189bfeddca25da8cff750f6dbf19488b11ef93
-
SHA256
56cbf7367154f0559d611c7ac6d32ac9bf9da7caba86534e11fab3b85d0c2611
-
SHA512
d01f78c7c25fc00a38aa501b4dbb36c3b9a364b15aeaab4bb6194abc3e2d420f449004f0fec59c5a32f8459a4ff20a31d37863e9d17797fbfe4a6d618a569d4a
-
SSDEEP
49152:1L6rApcsAS+6QVJX05cWVZ1HFICBl3vx4VVPK:1L60pTHjKK319F4VS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\56cbf7367154f0559d611c7ac6d32ac9bf9da7caba86534e11fab3b85d0c2611.exe"C:\Users\Admin\AppData\Local\Temp\56cbf7367154f0559d611c7ac6d32ac9bf9da7caba86534e11fab3b85d0c2611.exe"1⤵