Analysis
-
max time kernel
117s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 18:21
Static task
static1
Behavioral task
behavioral1
Sample
fd123d7efa7d0c09bb5f7648be0916fcd52280eb61322397140a04eb1393e918.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd123d7efa7d0c09bb5f7648be0916fcd52280eb61322397140a04eb1393e918.exe
Resource
win10v2004-20220812-en
General
-
Target
fd123d7efa7d0c09bb5f7648be0916fcd52280eb61322397140a04eb1393e918.exe
-
Size
398KB
-
MD5
e4820dec140ab13b28125126a92d9939
-
SHA1
fc8c8ba6d358b5806953f72c99cf7968b807a1b8
-
SHA256
fd123d7efa7d0c09bb5f7648be0916fcd52280eb61322397140a04eb1393e918
-
SHA512
817c602bef802efd5c471587e20bbfcb0012ae19bfdeb00d41dafe338b9c38a8a2de61a0e5425cc4b262c7974edfc0d3c119d36fcc1d6fe0c0239130a9b8401f
-
SSDEEP
6144:z3ZlgsdQlC2XvmfwctYPA7e7nTMzAEq9mpXAvRyB07nf0MEilMmdFfcsMuQK0+uT:zJddQlTXy43wqwpXorAHKNF05yW3vL
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.