Analysis
-
max time kernel
43s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
19-09-2022 08:52
Static task
static1
Behavioral task
behavioral1
Sample
GalleryF.lnk
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
GalleryF.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
of/allThose.dll
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
of/allThose.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
of/moreWhich.bat
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
of/moreWhich.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
of/onlyWant.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
of/onlyWant.js
Resource
win10v2004-20220901-en
General
-
Target
GalleryF.lnk
-
Size
1KB
-
MD5
bc9832f1f69cc0408e4cf012d485abab
-
SHA1
0b48b3193bbb95997dbc5381edfeaa79c8b7deaf
-
SHA256
5641c1e706f66470417b540f822408dca1ac53f9b700cf9acf44ec9ee26dd0b3
-
SHA512
0e41d208d72da0d008a7457057fd4e43788cb264529a0c114a384ed4fd29e005dfbe6da0ab68a6eeb6ce88a8b22b3d066c767a2d88a547107eed239019f3dced
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.