Analysis
-
max time kernel
146s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07/12/2022, 01:56
General
-
Target
ba091fbffc8d1b756e114184b8c7df943f84d32f34bbcfeae49fe738b28a4286.exe
-
Size
1.5MB
-
MD5
ee737efa408b4b24306f2cd8d91a62e8
-
SHA1
645fd11e077fab3df431dc36bd5a4019ec2d7ab3
-
SHA256
ba091fbffc8d1b756e114184b8c7df943f84d32f34bbcfeae49fe738b28a4286
-
SHA512
c586a9dbd0886003bc5a9f22c09b615d5e457979ceb66bb3b78910003f46a03c1db437e2fe5173f2942c15229054195288ca14f494e3b8631821051d5e0b1e06
-
SSDEEP
24576:C20Sr7uHnWcwiw6KEQarhKnoCf/mOCZOt2txh96BcXVF1UMvFbC1hneOrqqotZGz:C2T7uHmi4dAn8etOt2tXIaXWGFCTnepq
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba091fbffc8d1b756e114184b8c7df943f84d32f34bbcfeae49fe738b28a4286.exe"C:\Users\Admin\AppData\Local\Temp\ba091fbffc8d1b756e114184b8c7df943f84d32f34bbcfeae49fe738b28a4286.exe"1⤵