Analysis
- max time kernel
90s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
31/10/2022, 22:59
Static task
static1
Behavioral task
behavioral1
Sample
4ecd67c9fe30904d948fe202d1f7b2c16ca2c17cd9e4c1357c2212aad4c3f633.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ecd67c9fe30904d948fe202d1f7b2c16ca2c17cd9e4c1357c2212aad4c3f633.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 4ecd67c9fe30904d948fe202d1f7b2c16ca2c17cd9e4c1357c2212aad4c3f633.exe
- Size 1.6MB
- Sample221031-2ytsdadhh8
- SHA256 4ecd67c9fe30904d948fe202d1f7b2c16ca2c17cd9e4c1357c2212aad4c3f633
- MD5 ae8b45c2c25f73f49baea0dcbad2605e
- SHA1 8c4db987a706b637ae635555009cd11001f4abc5
- SHA512 8f2bde6679fcec44c156100581f3c03293fa847270df35f06a5101ce4efe47fe0983e90f842fcc08739b99f774b5dea8eca23cdfc1a051bdd7cf473acede0eca
- SSDEEP 49152:Huw2KJ1X+R2Zkb6k+7evCILx3hqjmyhz7lh2:Hu/KCekYeh13hcTht4
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.