Analysis
-
max time kernel
58s -
max time network
172s -
platform
windows10-1703_x64 -
resource
win10-20230915-en -
resource tags
arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system -
submitted
11-10-2023 14:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655.exe
Resource
win10-20230915-en
windows10-1703-x64
2 signatures
150 seconds
General
-
Target
c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655.exe
-
Size
725KB
-
MD5
b2665cdc6195fa0776856ef5f1726d80
-
SHA1
b587e42b53ee757661442bb6926e9e8aab0b3f03
-
SHA256
c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655
-
SHA512
51697e4cda6b38b11e903b286d9a9661fad8bd11e85a2fba810e10b8285b1d40b314755bc3f0e5075070aa3102cf80046e28d9e9f071045daab7dc40d59dd72d
-
SSDEEP
12288:iGvEW8Z/WKMsOB3UGZwVh1ZHjz59gcYUN8ig8rWSyM4efGFhCDhJq+:iGvEWwvsmGupP5CYRggPSefGydQ+
Score
10/10
Malware Config
Signatures
-
Detected Djvu ransomware 1 IoCs
resource yara_rule behavioral1/memory/4760-2-0x00000000023F0000-0x000000000250B000-memory.dmp family_djvu -
Djvu Ransomware
Ransomware which is a variant of the STOP family.