Resubmissions

07/11/2021, 17:39

211107-v8bafsgacr 1

22/10/2021, 07:24

211022-h8j65sbcb7 1

Analysis

  • max time kernel
    120s
  • max time network
    119s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    07/11/2021, 17:39

General

  • Target

    Ransomware TESTER.exe

  • Size

    3.4MB

  • MD5

    73e648b2a4b5694be7fe6a0384e911c4

  • SHA1

    48d275d6e9c7578f283f76ea0355bf0c25313004

  • SHA256

    bfe30493e06806cdb3081f03dc17f09b3e14434a765389f92eeace69cb16a77c

  • SHA512

    85548a6a1f97fa4e3c61775204d7cbec1b95836175889e28c6f16a333e18a48b393f14e60dd29fd46e8c75d1261a06d8ffe97622b89febe94a47ac9f73805651

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ransomware TESTER.exe
    "C:\Users\Admin\AppData\Local\Temp\Ransomware TESTER.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2724-115-0x0000000000A40000-0x0000000000A41000-memory.dmp

    Filesize

    4KB

  • memory/2724-117-0x0000000005AC0000-0x0000000005AC1000-memory.dmp

    Filesize

    4KB

  • memory/2724-118-0x0000000005660000-0x0000000005661000-memory.dmp

    Filesize

    4KB

  • memory/2724-119-0x00000000055C0000-0x0000000005ABE000-memory.dmp

    Filesize

    5.0MB

  • memory/2724-120-0x00000000055E0000-0x00000000055E1000-memory.dmp

    Filesize

    4KB

  • memory/2724-121-0x00000000055C0000-0x0000000005ABE000-memory.dmp

    Filesize

    5.0MB