Analysis
-
max time kernel
46s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
14-05-2022 14:42
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
tmp.exe
-
Size
124KB
-
MD5
1eb15f19afe77f525510b2a3f2f7aba3
-
SHA1
866fd6d1fa7ff186be41f3363fcf35898cf2b212
-
SHA256
b8edc36da64ff688d0ce92996a9207790063a6d3068da6516f0b83dc28501f79
-
SHA512
acfa43085f16c2959d8a7a3f7d64345baeff6074b3709f7d11084ea97cf493785115c84535bea8c22784e0e764655de34c6860a365877b425ee6ce481990b476
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1660-54-0x0000000076781000-0x0000000076783000-memory.dmpFilesize
8KB