Analysis
-
max time kernel
202s -
max time network
229s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 23:10
Static task
static1
Behavioral task
behavioral1
Sample
0a904d48bdc308e8a15c8d58551dbe013dc6c7ec056bc85c7c7519419261f9f8.lnk
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0a904d48bdc308e8a15c8d58551dbe013dc6c7ec056bc85c7c7519419261f9f8.lnk
Resource
win10v2004-20221111-en
General
-
Target
0a904d48bdc308e8a15c8d58551dbe013dc6c7ec056bc85c7c7519419261f9f8.lnk
-
Size
677B
-
MD5
a0d11a4f378a79a7a620770c88ccb23a
-
SHA1
63f572827be107650c21710eed9587f630f5449a
-
SHA256
0a904d48bdc308e8a15c8d58551dbe013dc6c7ec056bc85c7c7519419261f9f8
-
SHA512
33c2eedcba5dadc878b657c393b4dd836ad834a25a0c539a3d671d9ac3e41773532702c396aaaf2f3e2f8d3c943846e71513a8d9f7bd6e3b4cbb5458e239b5af
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.