Analysis
-
max time kernel
187s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 15:23
Static task
static1
Behavioral task
behavioral1
Sample
886d3fee03c48abdbcf2f9a3902f79f817a1efb715751233e9a14bab818de373.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
886d3fee03c48abdbcf2f9a3902f79f817a1efb715751233e9a14bab818de373.exe
Resource
win10v2004-20220812-en
General
-
Target
886d3fee03c48abdbcf2f9a3902f79f817a1efb715751233e9a14bab818de373.exe
-
Size
7.6MB
-
MD5
341a52d22a29fbdd3fb8a7ec55fad308
-
SHA1
4ae9521acb9978447851ff3113927fe3c8566866
-
SHA256
886d3fee03c48abdbcf2f9a3902f79f817a1efb715751233e9a14bab818de373
-
SHA512
263b18a15c95e92548b57b5a5601fb9b20bea303e8b8a7739f04fe04d47dc1066abbab8b2820c63cbf2d57c26907c7a1736cc5ba88b2f198d79b62d6e8238b01
-
SSDEEP
196608:EFqs/dB8poCvFkbjMaJbZskO7Yz/NOkQ6XVM3KyfIJ6:oh/dBUoMAZfR7Q6aKYB
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.