Analysis
-
max time kernel
177s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2022 16:19
Static task
static1
Behavioral task
behavioral1
Sample
694c05c4e0bd6c4fa7218a09ce34cd1284e77ed20dadd2771bd543d1a8014ebb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
694c05c4e0bd6c4fa7218a09ce34cd1284e77ed20dadd2771bd543d1a8014ebb.exe
Resource
win10v2004-20220812-en
General
-
Target
694c05c4e0bd6c4fa7218a09ce34cd1284e77ed20dadd2771bd543d1a8014ebb.exe
-
Size
399KB
-
MD5
6ee943eebcbfe9decf51400694bc9c80
-
SHA1
97e63311b447c76f703ef653571edbe93d60038f
-
SHA256
694c05c4e0bd6c4fa7218a09ce34cd1284e77ed20dadd2771bd543d1a8014ebb
-
SHA512
8ad893eedaa9bcbc8ff2b8e8fb737aaca25115e327feb9a39770d75bc206a555d214aa85bb2c5417e68a26ba34ed1266bb7d3b1353f16777e9aa8ff6dcf5c2d7
-
SSDEEP
12288:71/aGLDCMNpNAkoSzZWD8ayX2MQCw7D0FoWxH:71/aGLDCM4D8ayGMZoG
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.