Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2023 00:14
Static task
static1
Behavioral task
behavioral1
Sample
32bc94e84b62757e7b77c7deb0a96f2f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
32bc94e84b62757e7b77c7deb0a96f2f.exe
Resource
win10v2004-20231215-en
General
-
Target
32bc94e84b62757e7b77c7deb0a96f2f.exe
-
Size
1.1MB
-
MD5
32bc94e84b62757e7b77c7deb0a96f2f
-
SHA1
fa8782b9ec0eab3515aed4741c3feccb4c571f3e
-
SHA256
ada028c99efb8e8759c0b0622bf368279f7d8f8e7baad8a58cd195c65422a767
-
SHA512
ee2cade095d93cf109a44c477c8d877214c838e7a9057804c918e96f355ab08f2bab130887154a647515e08a884db58774258d6edf9040b183f8ff8b21e7cf4a
-
SSDEEP
12288:DuxTfQgrvG4PdE6RqjdCLrQqNzdEDUtTybs02Y9s+32AQm:DGjQgKfcrQqvEDUFyJ9
Malware Config
Signatures
-
clop
Ransomware discovered in early 2019 which has been actively developed since release.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).