Analysis
-
max time kernel
0s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 05:04
Static task
static1
Behavioral task
behavioral1
Sample
1c177d4f56eac780015015fc02f07c819481f5013a5b690f861285d324c0d582.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c177d4f56eac780015015fc02f07c819481f5013a5b690f861285d324c0d582.exe
Resource
win10v2004-20220812-en
General
-
Target
1c177d4f56eac780015015fc02f07c819481f5013a5b690f861285d324c0d582.exe
-
Size
173KB
-
MD5
ddadc08555d5a64e404ff439fd3657b4
-
SHA1
38b9e0e839f0a1e0d89b45f7fb631fca15d2a593
-
SHA256
1c177d4f56eac780015015fc02f07c819481f5013a5b690f861285d324c0d582
-
SHA512
7c750ef03458ed3935b9aa174a4c295735f8dfbc89976559348755b0603052177a86f2fb79af55d2ab634f4b5f2ca461fa7874e6043574dd909bc85172a99b34
-
SSDEEP
3072:f3c1fP4AJJthccNcSkxgQCZxIPeP+QyDoDAb+0Np55/UaivbfmGqdGLIxMMmPQ0a:/OPjjccNcS0ZCZxImWQyD/+0NHCpvLex
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD550fdadda3e993688401f6f1108fabdb4
SHA104a9ae55d0fb726be49809582cea41d75bf22a9a
SHA2566d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
SHA512e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
-
Filesize
10KB
MD57d227b5de234ebe6035ab55ac12b9c7b
SHA104f012abfc1127a2413906d21d24f8ee00a455c7
SHA256bfa41bf21562e852288a2176fa148308dd538ac7e3ab66ec8247a350fe4dca09
SHA512c89e5a74ea84667754b6ee476697df738bb14de3371d0ed92d407892f94d6c998afb7dbce3e731299ee10f5423924144a5fb6bd40f617b9a926d83b10bb03d0a