Analysis
-
max time kernel
295s -
max time network
313s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:40
Static task
static1
Behavioral task
behavioral1
Sample
b645cd41f66631ca788b53865205184bed2ceef5e959b4f5cd2953234e8ec3fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b645cd41f66631ca788b53865205184bed2ceef5e959b4f5cd2953234e8ec3fc.exe
Resource
win10v2004-20221111-en
General
-
Target
b645cd41f66631ca788b53865205184bed2ceef5e959b4f5cd2953234e8ec3fc.exe
-
Size
589KB
-
MD5
b459c324e677046f80e97b4d7cd6f84d
-
SHA1
7f63fc5c1c3a17b58473a2c5db411530b2516d95
-
SHA256
b645cd41f66631ca788b53865205184bed2ceef5e959b4f5cd2953234e8ec3fc
-
SHA512
1f58ccce137fee4d4061db3d74fe3bb7097e6f601851982e2d3bb8743b5f210e027dab59e580608f67194bda1eabe2244ab18de0f24526caf7eb302b2b2560bb
-
SSDEEP
12288:eJRwKNvcI2MwomfyvwN3aA90kb72qyW1rHD84UlZNK:ZKNvcI2MwomfyvwN3/l7Ry0t8NK
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.