Analysis
-
max time kernel
150s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 17:11
Static task
static1
Behavioral task
behavioral1
Sample
a1320c8bd0b75db28c1d2604ee0d2eea61d513e06b02d750f2768524289690ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1320c8bd0b75db28c1d2604ee0d2eea61d513e06b02d750f2768524289690ec.exe
Resource
win10v2004-20221111-en
General
-
Target
a1320c8bd0b75db28c1d2604ee0d2eea61d513e06b02d750f2768524289690ec.exe
-
Size
58KB
-
MD5
f265296da36fab962f10d9f35e08dadd
-
SHA1
6c2491740b71ab1b71d93231af1346fa98778c51
-
SHA256
a1320c8bd0b75db28c1d2604ee0d2eea61d513e06b02d750f2768524289690ec
-
SHA512
f05dba7f5ad3b4b790f42fcb8101ee90fdcb9a481745663324b0f449c015ec921a0576fc9c20697cd02f1d31e7c9ac4377557622db3e0a5c311854b193db2f99
-
SSDEEP
1536:HkFGhxgd4WbjUD0DhmJvCHq1ks0yC074mNUH:HnhxItvtDhmJvAq1ks0f074DH
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.