Analysis
- max time kernel
143s - max time network
167s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
02/10/2022, 06:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b.exe
- Size 548KB
- Sample221002-g2egmsbff4
- SHA256 2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b
- MD5 706db3cc08664453d03ad47973b64d39
- SHA1 5a7c51c93f00ecf716b7bc88d7e06d57ca131f4c
- SHA512 4147437c66680a6a8b1390eed487fe1e85ac110112582fba4b397a305fdf9c43faf53c8d83a5c0d514db13acf6dfdad82eac820ab4b8889a545bc4af856b3333
- SSDEEP 12288:pWf213EgbX2z0rGQg+vQlZZhPQIxVTFm2eDf/ElB7R:pRbFGQgplZZtQI3E2eO9
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.