Analysis
-
max time kernel
43s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
16-09-2022 14:01
Static task
static1
Behavioral task
behavioral1
Sample
AnalyticsDO.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
AnalyticsDO.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
now/atHow.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
now/atHow.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
now/someWe.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
now/someWe.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
now/wouldNew.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
now/wouldNew.js
Resource
win10v2004-20220901-en
General
-
Target
now/wouldNew.js
-
Size
182B
-
MD5
b92bfb7cf2554aeaaf4f8eae453113bf
-
SHA1
4ac24b440907c69f07f7e18edb8d01ea1dd86ede
-
SHA256
6d87255ae4699a8b661c98f41bed7e17299fe51c41312c999449492f8f96e202
-
SHA512
b1d6aa64ba4b9d9c65f2c206aba46f3c5882a1ca80b9ce7a0e05967d54cf9dfb64233fc423ba4628c04a9bd3886522f94ecd6be0facfeac7f07ebc189b75ea30
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.