Analysis
-
max time kernel
29s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 09:41
Static task
static1
Behavioral task
behavioral1
Sample
17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b.exe
Resource
win10v2004-20221111-en
General
-
Target
17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b.exe
-
Size
160KB
-
MD5
9faf3034ec3ee4dba75812f5afc41022
-
SHA1
71dc5de9d14242b660a62e6ca5178493f3c7d2de
-
SHA256
17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b
-
SHA512
b351698b67b03b2fa56f202dc5eed06f326b9ead2997d335b9a7022901d9538e6f131f28e0307fe98527c621265e22c7307ebad0387a849c42903e48bcf7245e
-
SSDEEP
3072:8sDV6Az1lWgFvYGnJd9KpZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd9KpZV3uTN9WU/G9h2w591
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1348-54-0x000007FEF35E0000-0x000007FEF4003000-memory.dmpFilesize
10.1MB
-
memory/1348-55-0x000007FEEE6C0000-0x000007FEEF756000-memory.dmpFilesize
16.6MB
-
memory/1348-56-0x0000000001FA6000-0x0000000001FC5000-memory.dmpFilesize
124KB
-
memory/1348-57-0x0000000001FA6000-0x0000000001FC5000-memory.dmpFilesize
124KB