Resubmissions

01-02-2022 13:08

220201-qc7xbschhq 1

Analysis

  • max time kernel
    357s
  • max time network
    357s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    01-02-2022 13:08

General

  • Target

    Anep Ransomware v1.0.exe

  • Size

    114KB

  • MD5

    f910a417c08f535d10ecaa42b3e688d2

  • SHA1

    bb9fd807f2f96fbcdd1733064da38ea5b61c45a3

  • SHA256

    a8e4502ebe2996ba93cb5aaf4a082f6f2af68e82038cb26f65f3dc0641eec71e

  • SHA512

    eef8ba7319a19de46246851ce017392dedddbd521e790f06cd01a24f613491d93bc251471215d9eb5b8c7e60d5900226fccf2e10d9d327126ad31a0629b23c6c

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Anep Ransomware v1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Anep Ransomware v1.0.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:1624
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:588

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/588-58-0x000007FEFBE61000-0x000007FEFBE63000-memory.dmp
      Filesize

      8KB

    • memory/1624-54-0x0000000000A00000-0x0000000000A22000-memory.dmp
      Filesize

      136KB

    • memory/1624-55-0x0000000075761000-0x0000000075763000-memory.dmp
      Filesize

      8KB

    • memory/1624-56-0x0000000004D60000-0x0000000004D61000-memory.dmp
      Filesize

      4KB

    • memory/1624-57-0x0000000004D65000-0x0000000004D76000-memory.dmp
      Filesize

      68KB