Analysis
- max time kernel
63s - max time network
130s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
31/10/2022, 22:43
Static task
static1
Behavioral task
behavioral1
Sample
06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb.exe
- Size 228KB
- Sample221031-2na8aaegdn
- SHA256 06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb
- MD5 a66c995903e391fb89744b65922bf12a
- SHA1 856c25cdb3fb257888d8e8a367a2520d531d1288
- SHA512 bf852a22d65192d204d957499d9b62d610259456609d4d2504daa0dc59bede22375cd4720a52f25b4a3506ed4ee3f90aad9828f9621c4c40e08f8633e35647eb
- SSDEEP 3072:PO7i9xI8907UZSOSu8ISVXhoxgLxwEn1h9qG:PO7i9v90lOSLpVBLKEn1hgG
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.