General
- Target 6162491047147ff6aa9ee6ec969bca97.exe
- Size 1.3MB
- Sample210207-4h3nbmg4ja
- SHA256 15732badaac520545535ae6bf64ed43f06e06a13e9e827f1fb7d5f47d250f4af
- MD5 6162491047147ff6aa9ee6ec969bca97
- SHA1 47d914a4ce04963ae47762ccae929f5f2d61cc36
- SHA512 0c358df50c02340b22a9b78c8f5f083a36bc49e3b585d4221bd0125dfd6eee320915bb342a37a9054c05a266f6c4300e250a13bbe636417a89b7e96047709950
- MD5 SHA1 SHA512
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
6162491047147ff6aa9ee6ec969bca97.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
6162491047147ff6aa9ee6ec969bca97.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 6162491047147ff6aa9ee6ec969bca97.exe
- Size 1.3MB
- SHA256 15732badaac520545535ae6bf64ed43f06e06a13e9e827f1fb7d5f47d250f4af
- MD5 6162491047147ff6aa9ee6ec969bca97
- SHA1 47d914a4ce04963ae47762ccae929f5f2d61cc36
- SHA512 0c358df50c02340b22a9b78c8f5f083a36bc49e3b585d4221bd0125dfd6eee320915bb342a37a9054c05a266f6c4300e250a13bbe636417a89b7e96047709950
- MD5 SHA1 SHA512
Score5/10Enumerates physical storage devices
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Suspicious use of SetThreadContext