Analysis
-
max time kernel
158s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 14:10
Static task
static1
Behavioral task
behavioral1
Sample
7fe59e8a42a4adeb0823c2c384255e7350f0140e0ee49cdb88a59346f3c4ce69.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7fe59e8a42a4adeb0823c2c384255e7350f0140e0ee49cdb88a59346f3c4ce69.exe
Resource
win10v2004-20221111-en
General
-
Target
7fe59e8a42a4adeb0823c2c384255e7350f0140e0ee49cdb88a59346f3c4ce69.exe
-
Size
296KB
-
MD5
e607bba278262a33f9930a64e4d79d64
-
SHA1
f78c37a83d38c63bb3b50388116252b2f7dc2233
-
SHA256
7fe59e8a42a4adeb0823c2c384255e7350f0140e0ee49cdb88a59346f3c4ce69
-
SHA512
83f32722937f28796608c86f9c8f0498249a8a2138a191b980ca46230aa87514235c118431a119c00cfea66ba248c2adb48c31a7810fb501207b1e306259092d
-
SSDEEP
6144:cnAm8IwV9BF+4ojFN72JIZRbfpTPOPRfxkE/Zbz:cnANrVB+4ojr2yRxiFyE/Zbz
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.