Overview

overview

10

Static

static

10

exe.ransom...99.exe

windows7-x64

9

exe.ransom...99.exe

windows10-2004-x64

9

exe.ransom...55.exe

windows7-x64

10

exe.ransom...55.exe

windows10-2004-x64

10

exe.ransom...FA.exe

windows7-x64

10

exe.ransom...FA.exe

windows10-2004-x64

10

exe.ransom...41.exe

windows7-x64

10

exe.ransom...41.exe

windows10-2004-x64

10

exe.ransom...98.exe

windows7-x64

9

exe.ransom...98.exe

windows10-2004-x64

9

exe.ransom...10.exe

windows7-x64

10

exe.ransom...10.exe

windows10-2004-x64

10

exe.ransom...26.exe

windows7-x64

10

exe.ransom...26.exe

windows10-2004-x64

10

exe.ransom...E5.exe

windows7-x64

10

exe.ransom...E5.exe

windows10-2004-x64

10

exe.ransom...DC.exe

windows7-x64

10

exe.ransom...DC.exe

windows10-2004-x64

10

exe.ransom...92.exe

windows7-x64

3

exe.ransom...92.exe

windows10-2004-x64

3

exe.ransom...3A.exe

windows7-x64

10

exe.ransom...3A.exe

windows10-2004-x64

10

exe.ransom...AA.exe

windows7-x64

3

exe.ransom...AA.exe

windows10-2004-x64

3

exe.ransom...5C.exe

windows7-x64

10

exe.ransom...5C.exe

windows10-2004-x64

10

exe.ransom...A6.exe

windows7-x64

9

exe.ransom...A6.exe

windows10-2004-x64

9

exe.ransom...AF.exe

windows7-x64

exe.ransom...AF.exe

windows10-2004-x64

exe.ransom...11.exe

windows7-x64

10

exe.ransom...11.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    47s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 05:59

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\exe.ransomware.babuk\10\5A\F5\105AF5C40C65F51979308E022C25DD285DB3CD20E9656CAABA0E9B1FC253898B\105AF.exe command="C:\Users\Admin\AppData\Local\Temp\exe.ransomware.babuk\10\5A\F5\105AF5C40C65F51979308E022C25DD285DB3CD20E9656CAABA0E9B1FC253898B\105AF.exe" wdir=C:\Users\Admin\AppData\Local\Temp\exe.ransomware.babuk\10\5A\F5\105AF5C40C65F51979308E022C25DD285DB3CD20E9656CAABA0E9B1FC253898B Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    exe.ransomware.babuk/10/5A/F5/105AF5C40C65F51979308E022C25DD285DB3CD20E9656CAABA0E9B1FC253898B/105AF.exe

  • Size

    67KB

  • MD5

    63b475e11b85f91942bcec10cc77bee9

  • SHA1

    450d3c8a613146140d04d2b75de90acee48958eb

  • SHA256

    105af5c40c65f51979308e022c25dd285db3cd20e9656caaba0e9b1fc253898b

  • SHA512

    1e55613646f3aabb692b1aa7fd20545730ba982720d52dd49dc233fba488f70bd0d5a889f26d6a955700ee5ec664d55569d4e927fc1aee4e26cc2e528ccf34d1

  • SSDEEP

    1536:PhkWBeG/LEOSsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG27:LBe8dSsrQLOJgY8Zp8LHD4XWaNH71dLr

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads