Analysis
-
max time kernel
151s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 20:09
Static task
static1
Behavioral task
behavioral1
Sample
9c49c3c19dd46110b216cca041597d115645c3888d49714b79f45f1e6c777847.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c49c3c19dd46110b216cca041597d115645c3888d49714b79f45f1e6c777847.exe
Resource
win10v2004-20220812-en
General
-
Target
9c49c3c19dd46110b216cca041597d115645c3888d49714b79f45f1e6c777847.exe
-
Size
504KB
-
MD5
0d39ea7a3a0ae409ecfd60cda46d10c0
-
SHA1
2dcebc6db9e1078f16c39347a7eca85aa8711ee6
-
SHA256
9c49c3c19dd46110b216cca041597d115645c3888d49714b79f45f1e6c777847
-
SHA512
c91b9716ecdf438135a265d32b49ee22999d1d6e743928aadb5b53245aa9927643f930570755a9847115e796e700e58738328067772ebf589c32493f2d98777e
-
SSDEEP
12288:K82eEoqPi64eNFNwDaf1tDreYqODOrE1jpVv8IHzY:UeEDP9lAO+YR+Er+MY
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.