Analysis
-
max time kernel
165s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
b374de79be62a3c88ae3e768b44978e9b3d03ced795035b38581902d83ac7363.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b374de79be62a3c88ae3e768b44978e9b3d03ced795035b38581902d83ac7363.exe
Resource
win10v2004-20220812-en
General
-
Target
b374de79be62a3c88ae3e768b44978e9b3d03ced795035b38581902d83ac7363.exe
-
Size
325KB
-
MD5
71b590994b6cb3012bb091f93b9d0b50
-
SHA1
d0f5901de93053e92a1f51018b5d5a2ffdd71dae
-
SHA256
b374de79be62a3c88ae3e768b44978e9b3d03ced795035b38581902d83ac7363
-
SHA512
876179098232e06d0d671a0b0bd82c4854cead25143351f7ca11224cfc32b6bdd491c3b0c4a59be5d0e56eae6ca237e3b5df99d08383cdc0921adb04dc0fa3ba
-
SSDEEP
6144:2e34+dl5Xp88H+47ER0Ee16kTccQgCmay0RPTmbq7OVd1teoqkm9Zr16r+5Ws:tdp88ZasvT6may4Pxu71mD0rIWs
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.