Overview

overview

1

Static

static

Ransomware TESTER.exe

windows7_x64

1

Ransomware TESTER.exe

windows10_x64

1

Resubmissions

07/11/2021, 17:39

211107-v8bafsgacr 1

22/10/2021, 07:24

211022-h8j65sbcb7 1

Analysis

  • max time kernel
    600s
  • max time network
    602s
  • platform
    windows7_x64
  • resource
    win7-en-20210920
  • submitted
    22/10/2021, 07:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Ransomware TESTER.exe

  • Size

    3.4MB

  • MD5

    73e648b2a4b5694be7fe6a0384e911c4

  • SHA1

    48d275d6e9c7578f283f76ea0355bf0c25313004

  • SHA256

    bfe30493e06806cdb3081f03dc17f09b3e14434a765389f92eeace69cb16a77c

  • SHA512

    85548a6a1f97fa4e3c61775204d7cbec1b95836175889e28c6f16a333e18a48b393f14e60dd29fd46e8c75d1261a06d8ffe97622b89febe94a47ac9f73805651

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ransomware TESTER.exe
    "C:\Users\Admin\AppData\Local\Temp\Ransomware TESTER.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/620-54-0x0000000000D60000-0x0000000000D61000-memory.dmp

    Filesize

    4KB

    Download

  • memory/620-56-0x0000000074F81000-0x0000000074F83000-memory.dmp

    Filesize

    8KB

    Download

  • memory/620-57-0x0000000000A40000-0x0000000000A41000-memory.dmp

    Filesize

    4KB

    Download

  • memory/620-59-0x0000000000A56000-0x0000000000A57000-memory.dmp

    Filesize

    4KB

    Download

  • memory/620-58-0x0000000000A45000-0x0000000000A56000-memory.dmp

    Filesize

    68KB

    Download