Analysis
-
max time kernel
50s -
max time network
147s -
platform
windows10-1703_x64 -
resource
win10-20220901-en -
resource tags
arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system -
submitted
07/02/2023, 19:31
Static task
static1
Behavioral task
behavioral1
Sample
REJ_1766.iso
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
REJ.lnk
Resource
win10-20220901-en
Behavioral task
behavioral3
Sample
oslo/nicks.txt
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
oslo/they.cmd
Resource
win10-20220812-en
Behavioral task
behavioral5
Sample
oslo/train.png
Resource
win10-20220901-en
General
-
Target
oslo/train.png
-
Size
30KB
-
MD5
2af0ccc12064f3c91abe9375b9d40e0a
-
SHA1
05a8946f0fa6c15727ce30eb02cd6603f8824ea7
-
SHA256
2ef506539c0cdd3c2443e4567d8a1413f18d335633e75b97568cc911f3b5f500
-
SHA512
b4915e4a828d667d003529164d7d354d48b98944926cf7473592c58f668e97d9d44982816ed0df50ad8537520e87cb66af1f7011000ac002e1afaad0d1a42b5e
-
SSDEEP
768:ag/oRFf+vEsguWfDXWnT4Gx205yIAhPYRhLB/VKKp6XrGI:foR4vExIT4Gx20YjYRtOKo1
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.