Analysis
-
max time kernel
91s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
13/02/2023, 01:59
General
-
Target
win7.exe
-
Size
78KB
-
MD5
35c6370224c3911f07d4d52a638ceb2e
-
SHA1
c0d86efc7a16459d88000db6273832c2bda75fdf
-
SHA256
4d9d50679a7ace443910c7bc9ea39f09ff522d2452b3046bde5cc3c66a30c088
-
SHA512
e7e236380df7d3000420fad53eb118d0ad79326090c2c8c25b19e17effa963b03bb55c4482f7ff517889a3b3bbd9301e23c288ccab8cb5efe9d9d4d319332343
-
SSDEEP
1536:AtxBR0RizqjseUx3cCAwPZCCc29W3uU3/euRHYJpAsWlkFcd61xklA:mzosessOZHr9G9/PoUD61xk
Score
8/10
Malware Config
Signatures
-
Downloads MZ/PE file
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\win7.exe"C:\Users\Admin\AppData\Local\Temp\win7.exe"1⤵