Analysis
-
max time kernel
112s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
04/01/2023, 18:49
General
-
Target
477a8c6c6c4530209f498ee857376cf9660cdab7bb250c02e4654b4d7e6be8c4.exe
-
Size
1.6MB
-
MD5
59799abdd28cce687b1a75c1a1b3aed8
-
SHA1
3f5299c3500a06724bee7271163528c092da6b62
-
SHA256
477a8c6c6c4530209f498ee857376cf9660cdab7bb250c02e4654b4d7e6be8c4
-
SHA512
08405f6326bd1212eb74d385f70c40119830cff2da519c4c16951738c76a4c78f32b3fafb14fcc82e7469d7a374283300af8d6e81b162c691a52ebd269023de0
-
SSDEEP
24576:02AXVq4qynNYeeJnlz3U3tSRwUSic8we3JxTK1q1MZBnemjSab0FjFjlHf:nAXoooJl2SnR/wK/l1MZplSab0Nf
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\477a8c6c6c4530209f498ee857376cf9660cdab7bb250c02e4654b4d7e6be8c4.exe"C:\Users\Admin\AppData\Local\Temp\477a8c6c6c4530209f498ee857376cf9660cdab7bb250c02e4654b4d7e6be8c4.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.6MB
-
Filesize
4.6MB
-
Filesize
4.6MB
-
Filesize
4.6MB
-
Filesize
4.6MB