General
- Target cylance_ransomware_Windows-sample.exe.bin.exe
- Size 151KB
- Sample230331-asb7lahc8w
- SHA256 7a5e813ec451cde49346d7e18aca31065846cafe52d88d08918a297196a6a49f
- MD5 31ed39e13ae9da7fa610f85b56838dde
- SHA1 ff602997ce7bdd695a282bd373daf57bea7a051f
- SHA512 199d70b70636555fbe753e83662cc672b5b06428050229856e9912488037cb4dae34a0766c3fcc560afd8fb07a4dcb5cfd8435a0fe3db86484a7929218cab5ee
- SSDEEP 3072:lAMP+TYgJWo6QD6ivAFvvYknplbZVaX6TEQZwRNfysqdoTPwum3n:OZNMnQFvM/lbbHTFZw/fLm3n
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
cylance_ransomware_Windows-sample.exe.bin.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
cylance_ransomware_Windows-sample.exe.bin.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target cylance_ransomware_Windows-sample.exe.bin.exe
- Size 151KB
- SHA256 7a5e813ec451cde49346d7e18aca31065846cafe52d88d08918a297196a6a49f
- MD5 31ed39e13ae9da7fa610f85b56838dde
- SHA1 ff602997ce7bdd695a282bd373daf57bea7a051f
- SHA512 199d70b70636555fbe753e83662cc672b5b06428050229856e9912488037cb4dae34a0766c3fcc560afd8fb07a4dcb5cfd8435a0fe3db86484a7929218cab5ee
- SSDEEP 3072:lAMP+TYgJWo6QD6ivAFvvYknplbZVaX6TEQZwRNfysqdoTPwum3n:OZNMnQFvM/lbbHTFZw/fLm3n
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.