Analysis
-
max time kernel
92s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
29-05-2024 08:11
Static task
static1
Behavioral task
behavioral1
Sample
83a6a4b726d1dba939827f093b2543c3651aa4a8d8c10d7b07a943fcf0412495.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
83a6a4b726d1dba939827f093b2543c3651aa4a8d8c10d7b07a943fcf0412495.exe
Resource
win10v2004-20240426-en
General
-
Target
83a6a4b726d1dba939827f093b2543c3651aa4a8d8c10d7b07a943fcf0412495.exe
-
Size
966KB
-
MD5
33d9f5cd85f310a6595782843d1093c3
-
SHA1
a15258da9bab56587cb692befd44bfd78ee98d9e
-
SHA256
83a6a4b726d1dba939827f093b2543c3651aa4a8d8c10d7b07a943fcf0412495
-
SHA512
221134772f3047fff6da43ad3163d51033622f72f8bdae1bc6c4202ddc6545c35052be4f906e043deff803023d2c91c5509c82d8eec4b8edc4844c8e107de332
-
SSDEEP
24576:oYvKuDavuojALeqShY8Snq+QHlIV3HeGUXbdu:JvKuuXAvShcqvlw3+GUX
Malware Config
Signatures
-
Detects Go variant of Hive Ransomware 1 IoCs
resource yara_rule behavioral2/memory/4832-8-0x0000000000400000-0x0000000000680000-memory.dmp hive_go -
Hive
A ransomware written in Golang first seen in June 2021.