Analysis
-
max time kernel
35s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02/12/2022, 00:02
Static task
static1
Behavioral task
behavioral1
Sample
433f3b15f776a1f8d6f10135fb804c5687a14645865b9fa489b307e093a49e69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
433f3b15f776a1f8d6f10135fb804c5687a14645865b9fa489b307e093a49e69.exe
Resource
win10v2004-20221111-en
General
-
Target
433f3b15f776a1f8d6f10135fb804c5687a14645865b9fa489b307e093a49e69.exe
-
Size
2.8MB
-
MD5
e20a354123be9235a025534b697de933
-
SHA1
66fbd02b41ba055390ae1291eda8f7c823039f54
-
SHA256
433f3b15f776a1f8d6f10135fb804c5687a14645865b9fa489b307e093a49e69
-
SHA512
9ff67c86f2c408048011715b7711d496f5ea4e2ba95631191e994a53f0c8e0ff5ca07fade6e33fa187c00d6e4d093a12fccb51b25b7cfd0f88c2e07e18a9e99c
-
SSDEEP
49152:A4J2B0SKKMzcm+Y4rtnuTx6KhFKrwTyTullHkT:Aycm+oBh65
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.