Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
05/10/2023, 19:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f5e1709ff7ab20ac92c5f9cc79f4e55c229339643815680da53b3ad835b083be.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
-
Target
f5e1709ff7ab20ac92c5f9cc79f4e55c229339643815680da53b3ad835b083be.exe
-
Size
692KB
-
MD5
e12a31cb4e0f3d827d91d8a2e3d51784
-
SHA1
8a3c4e7789d76ca8fec58b3b5d8188e3cf25b7fe
-
SHA256
f5e1709ff7ab20ac92c5f9cc79f4e55c229339643815680da53b3ad835b083be
-
SHA512
bcc7a1efc2b596c09f9fb3672e9f6fd0c313cca47f1754dffa37e6bd124b463858a229343686fdf85a0ee89920d496b57899798e2ad721d3ff2e058962131d19
-
SSDEEP
12288:8f2u3tWzoyDqFQJx3utxTljNDyh8wGEvafdLlI7ZboXHKQGRRUfW1pxJ:8f2MCDmCcDf+tvafvIdoaQ6RB1pL
Score
10/10
Malware Config
Signatures
-
Detected Djvu ransomware 1 IoCs
resource yara_rule behavioral1/memory/3236-2-0x0000000002440000-0x000000000255B000-memory.dmp family_djvu -
Djvu Ransomware
Ransomware which is a variant of the STOP family.