Analysis
-
max time kernel
137s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 08:52
Static task
static1
Behavioral task
behavioral1
Sample
Report.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Report.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
their/becauseWill.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
their/becauseWill.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
their/howUp.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
their/howUp.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
their/thingUp.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
their/thingUp.js
Resource
win10v2004-20220812-en
General
-
Target
Report.lnk
-
Size
1KB
-
MD5
b614b226fa53112e744fd3e024e851f6
-
SHA1
cdd2d5e1a6a1be72017115613f0d093322c33e42
-
SHA256
c56954fddcdf84180b51e6ebc440cc0876ec479e109a2b499c911d64ef97a749
-
SHA512
a2341975f1dd9bb89b0c69b92198ab8aa0cf105b7a68668c2f64d4152b660d34aa2f1540f55dcc3c8158b82ad2939bd8309e07dcf676bb568776a005bf493d21
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.