Analysis
-
max time kernel
36s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
04-12-2022 07:23
Static task
static1
Behavioral task
behavioral1
Sample
eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47.exe
Resource
win10v2004-20220812-en
General
-
Target
eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47.exe
-
Size
163KB
-
MD5
2caf545f331f5b9ba6625bd80aaced8d
-
SHA1
991cbb1f3c223574dff056264f00763b7c56f70b
-
SHA256
eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47
-
SHA512
8605df3cc16feb9ef42b70ad271309427af2bb9262581acfca3579b66838320acf7ad6cc8b6d5618e7eec086145bab77c82a23f59ee67f5991e5134431f6ae06
-
SSDEEP
3072:eERoVr9t04qX86NAISoF0TQDzZ+jO0t+0FhG0ADQFKmVlOrOoPY:A04B6L1O+d2t+AblsmrOCoPY
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.