Analysis
-
max time kernel
181s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06/12/2022, 06:35
General
-
Target
dfc0d1e8f33dd2154bf6551b51165f24e2c16a9cc714d584daea8664522af175.exe
-
Size
2.0MB
-
MD5
3706fe2b43ea76c67fe7026a6edae863
-
SHA1
60d37ec510abd3f3cff1c985e2d84555d3b51c86
-
SHA256
dfc0d1e8f33dd2154bf6551b51165f24e2c16a9cc714d584daea8664522af175
-
SHA512
837377d0f1bde078b278ddb69136a88855765221c718616edd95ad1403d38e234e67aeb079ce178a32d5334f997b71689b6e4acd851333210b2b95eb5512d310
-
SSDEEP
49152:ZvU0fxg7vO/HVxSWOwB1DShKEJvjnFCs1yJYDsoGdHrgU9fA1T:lU0fxevO/1fOwB1DS3v5Rw4soGdHEURy
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\dfc0d1e8f33dd2154bf6551b51165f24e2c16a9cc714d584daea8664522af175.exe"C:\Users\Admin\AppData\Local\Temp\dfc0d1e8f33dd2154bf6551b51165f24e2c16a9cc714d584daea8664522af175.exe"1⤵