Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
09-03-2023 08:45
General
-
Target
669798c4468bef48053fb8f263b6d471.exe
-
Size
263KB
-
MD5
669798c4468bef48053fb8f263b6d471
-
SHA1
28dea00a4a0eb8425add391cfccb4a5ce6e6608b
-
SHA256
d65bf305dc5e551590e61fbfb8fcb451a3098ae7e3fde8b23e035efe5a63f057
-
SHA512
19ac2dee794a6d0c90d29104475be0d577473a054a5ae157b756af7221bb276cfdf34d7d3d2b1eb41503095248f8929ab5594da9a198b628c7614c61c62cf46c
-
SSDEEP
6144:gYa6+YxKBm16Bj9lWAbkKXVa9S02ZVh2Qs/cEpeXzhdGZbghHrOSW:gYI7maj9tk9Svu/cW0zhsKhFW
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\669798c4468bef48053fb8f263b6d471.exe"C:\Users\Admin\AppData\Local\Temp\669798c4468bef48053fb8f263b6d471.exe"1⤵