Analysis
-
max time kernel
91s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26-09-2022 14:51
Static task
static1
Behavioral task
behavioral1
Sample
Art.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Art.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
banners/deactivatesUnimpacted.js
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
banners/deactivatesUnimpacted.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
banners/incidentallyOnwards.cmd
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
banners/incidentallyOnwards.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
banners/machination.dll
Resource
win7-20220901-en
General
-
Target
Art.lnk
-
Size
1KB
-
MD5
fefc17d6aa9f7d780b46e5522ef82cd4
-
SHA1
b3bc4ffac5f281fe3514f2b9b906da3cf516257b
-
SHA256
c90c6e3c573657f6f8f9c2e38eaaa551a910722dd310c698ecb05959c9c931ac
-
SHA512
5516cb89a9ae7e243dc601747e93cb2c329cb2303f0303845b2036b2aae11a864d79a3f3199e88ecf5f067f75e6032388cbef2da2e04bd57afe0f3d32553cda6
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.