Overview
overview
10Static
static
Claim_Letter.lnk
windows7-x64
3Claim_Letter.lnk
windows10-2004-x64
3about/doGive.bat
windows7-x64
1about/doGive.bat
windows10-2004-x64
1about/justFirst.dll
windows7-x64
10about/justFirst.dll
windows10-2004-x64
10about/wellThing.js
windows7-x64
3about/wellThing.js
windows10-2004-x64
1Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
14-09-2022 15:31
Static task
static1
Behavioral task
behavioral1
Sample
Claim_Letter.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Claim_Letter.lnk
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
about/doGive.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
about/doGive.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
about/justFirst.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
about/justFirst.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
about/wellThing.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
about/wellThing.js
Resource
win10v2004-20220812-en
General
-
Target
Claim_Letter.lnk
-
Size
1KB
-
MD5
c53b47b2e0791335f27db7d2bc8a1840
-
SHA1
4ccca8b640e34f78105030230df75071fe6e79a5
-
SHA256
f4fb6388e14d3108d5a422c26a504433700593760ff0de87eabec97841d70d09
-
SHA512
56c99109bbcaf12d458beb1769d72184dcf9095e5f29e7382157b1f5853f79aff1b992660a84a4ec0157270f10d9206c7640391c84e257adaea7e7777515780f
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/360-54-0x000007FEFB6A1000-0x000007FEFB6A3000-memory.dmpFilesize
8KB