Analysis
-
max time kernel
185s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 18:46
Static task
static1
Behavioral task
behavioral1
Sample
b0b57744586eaf094b196cb09755de78f0866f3dd6b14458e044263c6000e723.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b0b57744586eaf094b196cb09755de78f0866f3dd6b14458e044263c6000e723.exe
Resource
win10v2004-20221111-en
General
-
Target
b0b57744586eaf094b196cb09755de78f0866f3dd6b14458e044263c6000e723.exe
-
Size
352KB
-
MD5
32c2e7eb5cb3af881ad1fa58af214f90
-
SHA1
e2855ef0bc6e05ce4640434db9dde1daf6bf6b6c
-
SHA256
b0b57744586eaf094b196cb09755de78f0866f3dd6b14458e044263c6000e723
-
SHA512
5d6e0bbc9c7aed1dd4cc1f4da0fe4841d0f32f0a21139c1fd020f01ae8e4744181af02d1f9053cc8a0832308b18fdf867d45ecfa894d969790fb7a4ae8e79ed5
-
SSDEEP
6144:6B9mda39gw7O7LnVI2JgHDiDbno5QvE/2RD8QODM8TBFGaCgr5U7:6BpO7LnVI2Jg+HoP5U7
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.