Overview
overview
10Static
static
Calculation.lnk
windows7-x64
3Calculation.lnk
windows10-2004-x64
3look/alsoThere.js
windows7-x64
3look/alsoThere.js
windows10-2004-x64
1look/forLook.bat
windows7-x64
1look/forLook.bat
windows10-2004-x64
1look/youIn.dll
windows7-x64
1look/youIn.dll
windows10-2004-x64
1more/nowUp.js
windows7-x64
3more/nowUp.js
windows10-2004-x64
1more/whatThere.bat
windows7-x64
1more/whatThere.bat
windows10-2004-x64
1more/wouldDay.dll
windows7-x64
10more/wouldDay.dll
windows10-2004-x64
10Analysis
-
max time kernel
149s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 08:52
Static task
static1
Behavioral task
behavioral1
Sample
Calculation.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Calculation.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
look/alsoThere.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
look/alsoThere.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
look/forLook.bat
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
look/forLook.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
look/youIn.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
look/youIn.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
more/nowUp.js
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
more/nowUp.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
more/whatThere.bat
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
more/whatThere.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
more/wouldDay.dll
Resource
win7-20220812-en
General
-
Target
Calculation.lnk
-
Size
1KB
-
MD5
dd7c75c4bc50a3426a5d2bc95495c62f
-
SHA1
ef3a153e7bd8c2d50a1c3a71a875bd63a6fed556
-
SHA256
3beac9add395e035bbd8d739a1a0f006bce3131c1e5f60954137c0e9571e789c
-
SHA512
d66dd3aa96476616995c9b437dd6eef98b9ab349222879ebfc49dcf9fd5b7d79bf2b1dc3b81867353f57cf824b3fb05985527d11350d458acade44277a800bad
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.