Overview
overview
10Static
static
10DefaultDat...e4.dll
windows7-x64
1DefaultDat...e4.dll
windows10-2004-x64
1DefaultDat...10.dll
windows7-x64
1DefaultDat...10.dll
windows10-2004-x64
1installerx64.exe
windows7-x64
10installerx64.exe
windows10-2004-x64
10locales/Da...e4.dll
windows7-x64
1locales/Da...e4.dll
windows10-2004-x64
1locales/Da...-1.dll
windows7-x64
3locales/Da...-1.dll
windows10-2004-x64
3locales/ap...ity.js
windows7-x64
1locales/ap...ity.js
windows10-2004-x64
1locales/ap...ent.js
windows7-x64
1locales/ap...ent.js
windows10-2004-x64
1locales/ap...per.js
windows7-x64
1locales/ap...per.js
windows10-2004-x64
1locales/ap...ter.js
windows7-x64
1locales/ap...ter.js
windows10-2004-x64
1locales/ap...me.png
windows7-x64
1locales/ap...me.png
windows10-2004-x64
3locales/ap...ed.png
windows7-x64
1locales/ap...ed.png
windows10-2004-x64
3locales/ap...til.js
windows7-x64
1locales/ap...til.js
windows10-2004-x64
1locales/ap...iew.js
windows7-x64
1locales/ap...iew.js
windows10-2004-x64
1locales/ap...iew.js
windows7-x64
1locales/ap...iew.js
windows10-2004-x64
1locales/ap...ner.js
windows7-x64
1locales/ap...ner.js
windows10-2004-x64
1locales/ap...tor.js
windows7-x64
1locales/ap...tor.js
windows10-2004-x64
1Analysis
-
max time kernel
146s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21-03-2023 14:39
Behavioral task
behavioral1
Sample
DefaultData/Data/QtCore4.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DefaultData/Data/QtCore4.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
DefaultData/Data/mingwm10.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
DefaultData/Data/mingwm10.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
installerx64.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
installerx64.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
locales/Data/QtCore4.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
locales/Data/QtCore4.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
locales/Data/libgcc_s_dw2-1.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
locales/Data/libgcc_s_dw2-1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/EditImageActivity.js
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/EditImageActivity.js
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/EmojiBSFragment.js
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/EmojiBSFragment.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/FileSaveHelper.js
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/FileSaveHelper.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/filters/FilterViewAdapter.js
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
locales/app data/app/src/main/java/com/burhanrashid52/photoediting/filters/FilterViewAdapter.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_home.png
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_home.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_image_edited.png
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_image_edited.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/BitmapUtil.js
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/BitmapUtil.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/DrawingView.js
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/DrawingView.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/ImageFilterView.js
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/ImageFilterView.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/MultiTouchListener.js
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/MultiTouchListener.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditor.js
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditor.js
Resource
win10v2004-20230220-en
General
-
Target
locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_image_edited.png
-
Size
3.0MB
-
MD5
1a9be331d55b3759344772f4a55eae24
-
SHA1
c0baeb497c168144dcfb0a9d5f1dc8bf88d87a78
-
SHA256
93a977e162642364513c712be7559cd513a0e13cc5bcc3034f6bdaf8d6ce7281
-
SHA512
adc03d5449c9ca22b21795b54969a6a345450329cd26d057f437b9b013ee8597057003028afe884b83a168cd15c80ff142a133cdb8fcfac92e2be0c197be9f17
-
SSDEEP
49152:orW1/alIz1UnTAtFHv90SNkwywDiyJ3ca89okD1SoUXaroVZkyY5xaQ3FyK3A3:oW/KktFPmSNkWDppV89o8uXmoVZk9Mt3
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.