Analysis
-
max time kernel
205s -
max time network
223s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/12/2022, 07:41
General
-
Target
c14ffc854216cc5cf78bacff9a480f48340c01d2746b3473f328a3ac3d997ef5.exe
-
Size
1.4MB
-
MD5
7d264ec308784af3af8f484b3329b774
-
SHA1
6c4a038b2df170ce334796887e5909f920d43e78
-
SHA256
c14ffc854216cc5cf78bacff9a480f48340c01d2746b3473f328a3ac3d997ef5
-
SHA512
8e7d70284b284fc3ce93dc71faabb2a89a0f2dfaf9c5732644ae09fa826436ac809cc032da73e0f35e668272b27e03a08dbf85771f05f7a791dbb101c6b12806
-
SSDEEP
24576:sKW0ysvxRs70kUnK3Pg+ds+aC61kbb/PuzHs+V2srjdx8i7n:uXeBJK39dsTCWEbXuzHsfs3n
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c14ffc854216cc5cf78bacff9a480f48340c01d2746b3473f328a3ac3d997ef5.exe"C:\Users\Admin\AppData\Local\Temp\c14ffc854216cc5cf78bacff9a480f48340c01d2746b3473f328a3ac3d997ef5.exe"1⤵