Analysis
- max time kernel
111s - max time network
116s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system - submitted
31/10/2022, 22:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5343e5796f2efee42d0e16d2c06a2500cfe0a7b167d26729d33d0d35afcd298a.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5343e5796f2efee42d0e16d2c06a2500cfe0a7b167d26729d33d0d35afcd298a.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
- Target 5343e5796f2efee42d0e16d2c06a2500cfe0a7b167d26729d33d0d35afcd298a.exe
- Size 13.5MB
- Sample221031-2kr2maegbj
- SHA256 5343e5796f2efee42d0e16d2c06a2500cfe0a7b167d26729d33d0d35afcd298a
- MD5 e97ae4d4ca5ec9a6d6d3d7ffccc74362
- SHA1 31d256426e7292e5fbdff4490424e0166513f603
- SHA512 9ba282c05782a166215347ff40e9e1cf57d47fa1f81d9b3abb666a964f197f990695f945005fe71d89d9c0c3eed9b3dd3863e6a351ab35b81ce466965ecd4cbe
- SSDEEP 393216:GuQ7s0dvYB6tCrQ48o5p9hvmqX94NWLlhKlT/P:Guos0pg6t686vtN4NSG
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.