Analysis
-
max time kernel
99s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
11/04/2023, 20:40
General
-
Target
e841fe5a3ddb66e1fe6168c7813d7a809f882d3e14f30eeb9f4ba58ed48d720b.exe
-
Size
3.4MB
-
MD5
b61b82912fcdd0863d1322b92c57c81d
-
SHA1
208aba42339b0e58f20f2b8030c292f5bb8a00f5
-
SHA256
e841fe5a3ddb66e1fe6168c7813d7a809f882d3e14f30eeb9f4ba58ed48d720b
-
SHA512
dc1690d7bb58df33e031492b864f352158fe757ebe98a062b65073193bb7b14c77497cbe3a243d8e9a3d91c35b603eea83de7d028f0892c1c1fea273f246c773
-
SSDEEP
98304:AttHPm3K15oLrcDpFy0Ne8LMNpfnlbFI8Ssu:ctHO+EWr3e8INNLju
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e841fe5a3ddb66e1fe6168c7813d7a809f882d3e14f30eeb9f4ba58ed48d720b.exe"C:\Users\Admin\AppData\Local\Temp\e841fe5a3ddb66e1fe6168c7813d7a809f882d3e14f30eeb9f4ba58ed48d720b.exe"1⤵