Analysis
-
max time kernel
163s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 15:42
Static task
static1
Behavioral task
behavioral1
Sample
153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b.exe
Resource
win10v2004-20220812-en
General
-
Target
153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b.exe
-
Size
299KB
-
MD5
6020367d22a6c83adfd432e15141f4c5
-
SHA1
43ea084295a83d0a353ff61ec1870f2c9ab7bfce
-
SHA256
153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b
-
SHA512
8b6825fec9facdf03a93cc7e9019bae7dae8fd96c4d9ed0db1c332a51b968a564890afe50889305e5d432e5e55a40f1bc07a134afeb8b088c456e2eeacebd153
-
SSDEEP
6144:1hYXKNF6eAMX2SzlHigHKZAiD0tXUm3st2osmKLsbNlgv:1DFXAMXdlHrMEkF2rm4shlgv
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b.lnk 153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 153b26ef39e60c456834e284f46aa5af4a576620df3ceb790e61b0d738d7d57b.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.