Analysis
- max time kernel
7s - max time network
2s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
14/12/2022, 01:54
General
- Target Плаћање преосталог стања - К002230А0000000001122.....exe
- Size 274KB
- Sample221214-cbjlfsha73
- SHA256 f0da229cd56486cb27d1465410147676261d663a62aa9e95f27fda1b2ee5a662
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Плаћање преосталог стања - К002230А0000000001122.....exe"C:\Users\Admin\AppData\Local\Temp\Плаћање преосталог стања - К002230А0000000001122.....exe"1⤵