Analysis
-
max time kernel
136s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 11:57
Static task
static1
Behavioral task
behavioral1
Sample
e2980d02b76b25d6d47faa917ab247a2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2980d02b76b25d6d47faa917ab247a2.exe
Resource
win10v2004-20221111-en
General
-
Target
e2980d02b76b25d6d47faa917ab247a2.exe
-
Size
111KB
-
MD5
e2980d02b76b25d6d47faa917ab247a2
-
SHA1
e4a8ef9444b1567accb9f32c2d68d9bae0a19198
-
SHA256
8152c15bff08fde5e757a4dca8cf5fbae797401f3f1053c6c8aa05be604eac90
-
SHA512
8cfbbb6181ed64a08932401276a3298f9fe667c250e17798c12db165a964aea60f380026ab7c01bb246d2e622d22ec3dd06a1e0427ff9a297a8abebd1fca2e54
-
SSDEEP
3072:DmrArNnwguJb/TugckYRJn8c5Lng63CH7yGgPYmwoYKo:yEN/uJb/ZYRJ8cdng6SyGgrwn
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.