Analysis
-
max time kernel
159s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 11:18
Static task
static1
Behavioral task
behavioral1
Sample
c2593d802ff787a215f9ec65350ea66ccafd6d652ea91faa6af89ef1f856e6f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2593d802ff787a215f9ec65350ea66ccafd6d652ea91faa6af89ef1f856e6f6.exe
Resource
win10v2004-20220812-en
General
-
Target
c2593d802ff787a215f9ec65350ea66ccafd6d652ea91faa6af89ef1f856e6f6.exe
-
Size
825KB
-
MD5
c7c46f7db23dd4fb0acf4cee0c4d4fed
-
SHA1
73df06beff6bd1ead4114b64ba34431d444f4483
-
SHA256
c2593d802ff787a215f9ec65350ea66ccafd6d652ea91faa6af89ef1f856e6f6
-
SHA512
e79fa58cf6f3b10f2c12e3f9311bd7bc5c742f3af12d469299195f79d7eb8c09f00a2e2dcc07c9e05b39d4b736837c158473c72f3b95b38569f650951faa4505
-
SSDEEP
12288:CcT4UN3K3vrB1+ijSv9T94k4TVSoZRPWBItvUM/pINXDbd0Rflsbl0AcRcKTq:rT4UlmBMHvT8VSoZkINUQWNXHYwlCVq
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.