Analysis
-
max time kernel
166s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
11-02-2023 19:35
General
-
Target
1a59443d8ceda5d835583f7e009dfe821d130730fd6e8c86241c45b647bc4e08.exe
-
Size
13.1MB
-
MD5
18affdfc10ae29c1d161a75b72c1e912
-
SHA1
8e9f85e9e669c2710f6d22e0cf2ba8173ab9077e
-
SHA256
1a59443d8ceda5d835583f7e009dfe821d130730fd6e8c86241c45b647bc4e08
-
SHA512
e75c9e0c4bd368ae9468849447c7eef6b42f97467a3c6ce6dc0c80fa8b6980345b46bac090b2f7dc1e98962389ba66210a239bd82553d91bf4cfd61ba34089bb
-
SSDEEP
196608:3kPhGIx/bXLsL9iBk9zVS+c5pH5Jvju6tmdFvbTY2BAVejadwkRUvGiweULoRlUX:3kh1Lq9tQbX/vGvbUFUGTS5ULYlQ0g5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a59443d8ceda5d835583f7e009dfe821d130730fd6e8c86241c45b647bc4e08.exe"C:\Users\Admin\AppData\Local\Temp\1a59443d8ceda5d835583f7e009dfe821d130730fd6e8c86241c45b647bc4e08.exe"1⤵