Analysis
-
max time kernel
151s -
max time network
172s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
11-10-2022 07:11
General
-
Target
9599ccaae873bbee00a31f0c3410debfe6f6da3a0436044900cd5e2df9fd5ce9.exe
-
Size
39KB
-
MD5
1bab087b92d33800cae029a9b9950e73
-
SHA1
3c01964bc5473d74c28e6db8f40d066ec08e500b
-
SHA256
9599ccaae873bbee00a31f0c3410debfe6f6da3a0436044900cd5e2df9fd5ce9
-
SHA512
c527c01eaff4b8466057be917f4503debeb9b163cd9d4f357b4d188148f2af97ac4cecc21850ac16bc77ac777e7a512b9e8f255383a3b2f530792052567a9a68
-
SSDEEP
768:scnX1fE6RmeWx6KhYnYo12VI3h9eybojFlF:sIp6zG12C9eyboRl
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9599ccaae873bbee00a31f0c3410debfe6f6da3a0436044900cd5e2df9fd5ce9.exe"C:\Users\Admin\AppData\Local\Temp\9599ccaae873bbee00a31f0c3410debfe6f6da3a0436044900cd5e2df9fd5ce9.exe"1⤵
- Checks computer location settings
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
56KB
-
Filesize
56KB