Overview
overview
10Static
static
HEESRICD/CRIHNQKO.cmd
windows7-x64
3HEESRICD/CRIHNQKO.cmd
windows10-2004-x64
1HEESRICD/ETPZENER.js
windows7-x64
1HEESRICD/ETPZENER.js
windows10-2004-x64
1HEESRICD/J...fh.pdf
windows7-x64
1HEESRICD/J...fh.pdf
windows10-2004-x64
1HEESRICD/KRTQRRFH.dll
windows7-x64
10HEESRICD/KRTQRRFH.dll
windows10-2004-x64
10invoice.pdf.lnk
windows7-x64
3invoice.pdf.lnk
windows10-2004-x64
3Analysis
-
max time kernel
97s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16-11-2022 12:20
Static task
static1
Behavioral task
behavioral1
Sample
HEESRICD/CRIHNQKO.cmd
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
HEESRICD/CRIHNQKO.cmd
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
HEESRICD/ETPZENER.js
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
HEESRICD/ETPZENER.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
HEESRICD/JG343534I3khfdfgkdfh.pdf
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
HEESRICD/JG343534I3khfdfgkdfh.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
HEESRICD/KRTQRRFH.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
HEESRICD/KRTQRRFH.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
invoice.pdf.lnk
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
invoice.pdf.lnk
Resource
win10v2004-20220812-en
General
-
Target
invoice.pdf.lnk
-
Size
1KB
-
MD5
82f6859bc0e99302adef28a854d15177
-
SHA1
d83cf532efea3f4693315005773f69785ce1e0a1
-
SHA256
a30e528a6ad1c5b0a3930a28b04d4fae700a799958d13e7dfa274c3ad1cd352b
-
SHA512
3fcaa7e431c5fe301b2b826103e0f0b7b41caec5485a08432646084adffaf00f741b98f275403689d65d8ffe9e5a9eb1edbe1db0a810f74ad53607552323d2ea
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.