General
- Target 5d4a217b376391725efa48b7669a489d.exe
- Size 1.1MB
- Sample210205-cf1cz2hpfx
- SHA256 a3fa345d4d272ddb13e0e3141bf18eac8521acaf8eb2eff8d3395f056740c2bd
- MD5 5d4a217b376391725efa48b7669a489d
- SHA1 1696db3ccfbb455b4c7072c6c30f18fa2b7032af
- SHA512 e56b9eb32ef7676050cc4a81e255ff36cb3a9f5d03d5877dbd286727069f5e6a1a288f6097e1fed145b50cb57c49e070fa1ee96581b22e3f4541b658497e3b2c
- MD5 SHA1 SHA512
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
5d4a217b376391725efa48b7669a489d.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5d4a217b376391725efa48b7669a489d.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 5d4a217b376391725efa48b7669a489d.exe
- Size 1.1MB
- SHA256 a3fa345d4d272ddb13e0e3141bf18eac8521acaf8eb2eff8d3395f056740c2bd
- MD5 5d4a217b376391725efa48b7669a489d
- SHA1 1696db3ccfbb455b4c7072c6c30f18fa2b7032af
- SHA512 e56b9eb32ef7676050cc4a81e255ff36cb3a9f5d03d5877dbd286727069f5e6a1a288f6097e1fed145b50cb57c49e070fa1ee96581b22e3f4541b658497e3b2c
- MD5 SHA1 SHA512
Score5/10-
Enumerates physical storage devices
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetThreadContext