General
- Target PO 2420208.exe
- Size 382KB
- Sample210201-4hep4lba8x
- SHA256 697b6bfe19cd6468e7930c14c997e746a433ba9b11489bb02835a6183ec3f4c0
- MD5 f6c5bbd55c09df89861580500b799974
- SHA1 55b45b4600ccefa88b27286225a33de28ac42b1b
- SHA512 e19353718b7381a2f46237d987f86b87e29f9fd3234a346d29261c2b68502769d70ee17def4c1102c0d3b31fab916fe92021c9e1b9c0aac31949aeacc65fc3bc
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
PO 2420208.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PO 2420208.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target PO 2420208.exe
- Size 382KB
- SHA256 697b6bfe19cd6468e7930c14c997e746a433ba9b11489bb02835a6183ec3f4c0
- MD5 f6c5bbd55c09df89861580500b799974
- SHA1 55b45b4600ccefa88b27286225a33de28ac42b1b
- SHA512 e19353718b7381a2f46237d987f86b87e29f9fd3234a346d29261c2b68502769d70ee17def4c1102c0d3b31fab916fe92021c9e1b9c0aac31949aeacc65fc3bc
- MD5 SHA1 SHA512
Score7/10-
Loads dropped DLL
-
Enumerates physical storage devices
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.