Analysis
- max time kernel
120s - max time network
120s - platform
windows7_x64 - resource
win7-en-20211104 - submitted
24/11/2021, 14:07
Static task
static1
Behavioral task
behavioral1
Sample
invoice copy.pdf.exe
Resource
win7-en-20211104
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
invoice copy.pdf.exe
Resource
win10-en-20211104
0 signatures
0 seconds
General
- Target invoice copy.pdf.exe
- Size 66KB
- Sample211124-rez5yachar
- SHA256 93bddd58c1a33efb1dbceca2ce81778a84565e48439fc0907d13f0b07930847c
- MD5 025ac5a046659221f1aabc4f69d19f75
- SHA1 a357bf366ade5bc70040f94c7a23ec1239a1e450
- SHA512 c38457d7a24ebba7152decf0dafb7fee426ccb6be1e9518c034e65b8cf97d94208a5608606b8333b56fe8393b4afc4fd638a1958e967caaea3b93908830791b5
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.