Analysis
- max time kernel
150s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
23/08/2022, 22:20
Static task
static1
Behavioral task
behavioral1
Sample
Inv#08-23-2022_034.lnk
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Inv#08-23-2022_034.lnk
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
MANY/CASEY.cmd
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
MANY/CASEY.cmd
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
MANY/TRACTOR.dll
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
MANY/TRACTOR.dll
Resource
win10v2004-20220812-en
3 signatures
150 seconds
General
- Target Inv#08-23-2022_034.lnk
- Size 1KB
- Sample220823-19b62adee5
- SHA256 3b315b13dca1f51fcce3af906200a31c1d8c2320cd170a2d7d8442de3fb23942
- MD5 21bb3b302af1dca7b1b7ec8ef91e301a
- SHA1 b215faeb6b60c8cd91a69fa8404d6587b3bbdf40
- SHA512 fef3ee8005db98ab7edd06414a5e2996c56ac29e0ca51cfeff3685066c7253330b9d14ba53218d6ffe093cdb4837b730a3c16c8d6b99dfe02c1ec0401eb7c9b4
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.