Overview
overview
10Static
static
8003e0d05-e...4f.eml
windows7-x64
5003e0d05-e...4f.eml
windows10-2004-x64
3QS75790832...QQ.zip
windows7-x64
1QS75790832...QQ.zip
windows10-2004-x64
1QS75790832...QQ.doc
windows7-x64
10QS75790832...QQ.doc
windows10-2004-x64
10email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1image003.png
windows7-x64
3image003.png
windows10-2004-x64
3Analysis
-
max time kernel
146s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
15-03-2023 04:56
Behavioral task
behavioral1
Sample
003e0d05-e098-4f77-c885-46d789da144f.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
003e0d05-e098-4f77-c885-46d789da144f.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
QS75790832498186151LQQ.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
QS75790832498186151LQQ.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
QS75790832498186151LQQ.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
QS75790832498186151LQQ.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
image003.png
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
image003.png
Resource
win10v2004-20230220-en
General
-
Target
image003.png
-
Size
7KB
-
MD5
607903095bbba5c94b4aa4bd9d862088
-
SHA1
c47380cda6c6958bd181146bb71ee99a0fa0ab40
-
SHA256
d1067a71fd2e72195a688bcd9dc10278b037367d1a0e6ad117aed48b8491b3c0
-
SHA512
39c1cf4658bd15444a073cf0fd7daccea9ba51d15cc058b5194bbeb709083f828a49d033ca3306a8707e2b07633fa8489d1d6b54b9df012b1b7949c66f4716bb
-
SSDEEP
192:DH4U8ObOxB+oACrJ1fACSSp6dr7zoYoXzae:58qOxB+jCrJoSYr78Z+e
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.