General
-
Target
e08f17b42e47bf973bf866f167a49b931b99fe1b50bc820078ac2644bd8c209c
-
Size
79KB
-
Sample
221002-t9k1lsfaf5
-
MD5
13662706c856d1c853a6f365094daf12
-
SHA1
a1530c0b0d04187bde9df1482dec9c9b93925932
-
SHA256
e08f17b42e47bf973bf866f167a49b931b99fe1b50bc820078ac2644bd8c209c
-
SHA512
32534aa723f87216fde47c3532f9c73f0e24c89aa4cf6eefc68561e40b6f1b1759b5da14f78792e69c61cfb641568ec771df69956ac9749791f1e3d4592cd3ec
-
SSDEEP
1536:G6UhZM4hubesrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2zs4:AhZ5YesrQLOJgY8Zp8LHD4XWaNH71dLI
Static task
static1
Behavioral task
behavioral1
Sample
e08f17b42e47bf973bf866f167a49b931b99fe1b50bc820078ac2644bd8c209c.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
e08f17b42e47bf973bf866f167a49b931b99fe1b50bc820078ac2644bd8c209c
-
Size
79KB
-
MD5
13662706c856d1c853a6f365094daf12
-
SHA1
a1530c0b0d04187bde9df1482dec9c9b93925932
-
SHA256
e08f17b42e47bf973bf866f167a49b931b99fe1b50bc820078ac2644bd8c209c
-
SHA512
32534aa723f87216fde47c3532f9c73f0e24c89aa4cf6eefc68561e40b6f1b1759b5da14f78792e69c61cfb641568ec771df69956ac9749791f1e3d4592cd3ec
-
SSDEEP
1536:G6UhZM4hubesrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2zs4:AhZ5YesrQLOJgY8Zp8LHD4XWaNH71dLI
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-