Resubmissions
08/04/2023, 15:48
230408-s8395adh86308/04/2023, 08:52
230408-ksyqpsee8s308/04/2023, 06:39
230408-hexv5sca891008/04/2023, 06:35
230408-hcteyaeb3x6Analysis
- max time kernel
135s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
08/04/2023, 06:35
Static task
static1
Behavioral task
behavioral1
Sample
dd.jpg
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
dd.jpg
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
- Target dd.jpg
- Size 6KB
- Sample230408-hcteyaeb3x
- SHA256 a62ba298c4805bfffd02b7a70f40e53bc15c8e886700c13725f8def3cce8cb42
- MD5 a3379f3ef2067c569a81e26ad1303bde
- SHA1 3b22b4cb611681a7ac726ed9278de0ba804c4d4f
- SHA512 1b179f71342474ea75380e12d0ed74c687dc7b7763d05ed55eb063b378616ec91304dc4440dc4cb046743c283e2daddd77e83e71698cf4b3049c8124444e98f2
- SSDEEP 192:Ow0FjMHrzcdnf2LNugxJG5/O0yY3P0GBiu:70FQHrYdfcMLFP0GAu
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.