Analysis
-
max time kernel
103s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
04/03/2023, 13:27
General
-
Target
6b1dfd7dea5646edf4929d796796b79b1a10233faf4e58910233635f0b32958f.exe
-
Size
14.6MB
-
MD5
ef7858bd263fd03fba8804f9f9d3d85b
-
SHA1
21e75b2d2b9dabb2bc0c7a74d0efcabeaaebeabd
-
SHA256
6b1dfd7dea5646edf4929d796796b79b1a10233faf4e58910233635f0b32958f
-
SHA512
bdded1a11eb754618912c16e8076dac68c7a2555fc2306e7671254efecdc827f3785473c4e9a6bac91671db179fdf8431c885040b4f3292534452c9bcfcd79a8
-
SSDEEP
393216:5l0/VV5pQPPIHJeADFOsj109UE0t5yYBYn:5l0X5pQPPYJeElfIxn
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b1dfd7dea5646edf4929d796796b79b1a10233faf4e58910233635f0b32958f.exe"C:\Users\Admin\AppData\Local\Temp\6b1dfd7dea5646edf4929d796796b79b1a10233faf4e58910233635f0b32958f.exe"1⤵