Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
30-01-2023 09:28
Static task
static1
Behavioral task
behavioral1
Sample
Document_20174.doc.scr
Resource
win7-20221111-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Document_20174.doc.scr
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Document_20174.doc.scr
-
Size
16KB
-
MD5
f9a777357d5780482e95abbd9333fc2e
-
SHA1
a100f135acfe489250067fc64874b49745aa0844
-
SHA256
b22b92d3736d46ec635e39270782ba3b2407e465212d222723e3b709df0e95ee
-
SHA512
067c72522e39dcfb4ad2810af270ecfb0e0018a7905a4a244fc7b80a52c79d0c56f4337ea80d476ffe627ca10e86d9a5ea9eb113a04f4d37333b6f663785a648
-
SSDEEP
384:k1Cn5npM3216i7jToD/vWoveM87zaL5j8J9OxX:N5npM3gFcD/vba7zH3OJ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.