Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-04-2024 08:08
Behavioral task
behavioral1
Sample
d1a6ff8fbcb49b97107c3145ffbbeee44bd8886193856374002e4aaee27a50f3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1a6ff8fbcb49b97107c3145ffbbeee44bd8886193856374002e4aaee27a50f3.exe
Resource
win10v2004-20240226-en
General
-
Target
d1a6ff8fbcb49b97107c3145ffbbeee44bd8886193856374002e4aaee27a50f3.exe
-
Size
872KB
-
MD5
d015a2fae71978f785fa02c38423df2a
-
SHA1
1e0bb5360f52fbfce533788401070485364edbcb
-
SHA256
d1a6ff8fbcb49b97107c3145ffbbeee44bd8886193856374002e4aaee27a50f3
-
SHA512
622a886e52ba476dbf79cbca5c930dfc6c9dbbb6291b0274fcafd4becdbf5f03b51e3f5e5fdb689424f97a1838627f1b65907ccfeab5c6cc55992d7b52c2ca49
-
SSDEEP
12288:3L5Ya5t1QR5UXpNAG3vWYgeWYg955/155/rI2C7ECSz5+XJBLWe+nForgytP:75Ya5t1QRmXpNAG3AaDwKJWe+nFagy
Malware Config
Signatures
-
AtomSilo
Ransomware family first seen in September 2021.
-
AtomSilo Ransomware 2 IoCs
resource yara_rule behavioral2/memory/3972-0-0x00007FF6DF950000-0x00007FF6DFA2A000-memory.dmp family_atomsilo behavioral2/memory/3972-1-0x00007FF6DF950000-0x00007FF6DFA2A000-memory.dmp family_atomsilo