Analysis
-
max time kernel
77s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
11-03-2023 13:56
General
-
Target
babyk/decryptor.exe
-
Size
69KB
-
MD5
e1b2cfa88cc03d30a6f6268b72babbc4
-
SHA1
f75c083f9fef28ca9cd5d05c9172dc44477712d6
-
SHA256
4192105a7de1145b81bf2debf8940f3d3afe02f8237d57fbeaf108179b922f35
-
SHA512
2ac7011bb28a1cd53d6ff793923f0b9879b830154e9a0dd1c86406e1fd33507398b4575ffc11df08e6c27305e2ca69022594dc711a83a4f6c75f760f0ab495c2
-
SSDEEP
1536:Ei6+W1BBsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2wARxYTs88:y+WhsrQLOJgY8Zp8LHD4XWaNH71dLdGo
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\babyk\decryptor.exe"C:\Users\Admin\AppData\Local\Temp\babyk\decryptor.exe"1⤵