Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
26-09-2022 15:40
Static task
static1
Behavioral task
behavioral1
Sample
Art.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Art.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
banners/codifyingEndowments.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
banners/codifyingEndowments.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
banners/muddled.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
banners/muddled.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
banners/sapientLashings.cmd
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
banners/sapientLashings.cmd
Resource
win10v2004-20220812-en
General
-
Target
banners/codifyingEndowments.js
-
Size
216B
-
MD5
b023084e1e3f85d1f6a7c93b560e7151
-
SHA1
d3ebd0a4528a781020d6985767a8ada1c585e95d
-
SHA256
ede0b6e6d181992767791bc1a9fc029953acfdcc4012c86b3273bf5f47f5e77c
-
SHA512
95cc7a77bdb5a515b75966915df0c6a5f874f622d4e52d89fad5502ea8de1d4f5f7a6a08b093978f39608d937a31def60415560e5c0cf36f7c41c5b465db66c1
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1604-54-0x000007FEFB6A1000-0x000007FEFB6A3000-memory.dmpFilesize
8KB