Analysis
-
max time kernel
148s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2022 16:24
Static task
static1
Behavioral task
behavioral1
Sample
c69e47e2e7c6df846afcc01068ae91c5cea67dc7371b71d5ace1d8e58b2d0e38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c69e47e2e7c6df846afcc01068ae91c5cea67dc7371b71d5ace1d8e58b2d0e38.exe
Resource
win10v2004-20220812-en
General
-
Target
c69e47e2e7c6df846afcc01068ae91c5cea67dc7371b71d5ace1d8e58b2d0e38.exe
-
Size
796KB
-
MD5
6b1ee34a172b46b98732c9b0bf10a0d0
-
SHA1
b58c66e7c37b4e77ebab0d3394f30ee4d57dcf8c
-
SHA256
c69e47e2e7c6df846afcc01068ae91c5cea67dc7371b71d5ace1d8e58b2d0e38
-
SHA512
0e420769e86fe7a11a1620448ff5e08bc58a1fdf4b8af1bb0f2e1d11b9da3e1942965d716d454c75d54a2211e1c7b9953e8fddc62f0f4a449b01c0f267b0e568
-
SSDEEP
24576:7M/wOF9ZHQTslXZliDQ754v8sOljisyuJAMM1TF:wVHiCJ4Q7K8sOtisy8AMs
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.