Analysis
-
max time kernel
82s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
11/04/2023, 10:13
General
-
Target
44588db2b4c0d8780102c85d50527973b9ecdc7aaf1274b934ada939bfb7daa1.exe
-
Size
512KB
-
MD5
0c0b1593fd78610fef82991f09555039
-
SHA1
33317fb5d35e35027449302a3e76cd3fbfa84fb9
-
SHA256
44588db2b4c0d8780102c85d50527973b9ecdc7aaf1274b934ada939bfb7daa1
-
SHA512
1ba70c8941e7b2f1807f6e67a43cec2941b20af303a259e14adf8e3907edd0a977e63f25fb8456168995dcd9f5de7717bbd4eeb804cf011a5896e148553aa4cf
-
SSDEEP
12288:TEOluhcvsLkulLYUUDGYkDCxmUSyyNbNOP:T0hcvs4ufDD/yyNROP
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\44588db2b4c0d8780102c85d50527973b9ecdc7aaf1274b934ada939bfb7daa1.exe"C:\Users\Admin\AppData\Local\Temp\44588db2b4c0d8780102c85d50527973b9ecdc7aaf1274b934ada939bfb7daa1.exe"1⤵