Overview
overview
10Static
static
10WinRing0x64.sys
windows7-x64
1WinRing0x64.sys
windows10-2004-x64
1go.exe
windows7-x64
9go.exe
windows10-2004-x64
9mozilla.vbs
windows7-x64
8mozilla.vbs
windows10-2004-x64
8mservice.exe
windows7-x64
1mservice.exe
windows10-2004-x64
1mservice.vbs
windows7-x64
3mservice.vbs
windows10-2004-x64
3ps.exe
windows7-x64
7ps.exe
windows10-2004-x64
7sarmat.vbs
windows7-x64
1sarmat.vbs
windows10-2004-x64
1Analysis
-
max time kernel
107s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
28/03/2025, 15:12
Behavioral task
behavioral1
Sample
WinRing0x64.sys
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
WinRing0x64.sys
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
go.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
go.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
mozilla.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
mozilla.vbs
Resource
win10v2004-20250313-en
Behavioral task
behavioral7
Sample
mservice.exe
Resource
win7-20250207-en
Behavioral task
behavioral8
Sample
mservice.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral9
Sample
mservice.vbs
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
mservice.vbs
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
ps.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ps.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
sarmat.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
sarmat.vbs
Resource
win10v2004-20250313-en
General
-
Target
mservice.vbs
-
Size
1KB
-
MD5
9317de7dbbe81436c5e4f25b3743ef3b
-
SHA1
a3fdf866b8ef5e89e9ee729553a8d86a7ec79ce1
-
SHA256
d111d16738309bf217d1b08b1a53cb9371d061015f07152b248de41d864a2b89
-
SHA512
f315ca9a4c6a7f3b4acc5ddfbd6e74c28fbdcddc21910c9dbb610a473a6075739ad3388b106ddffe460560f0c3498f8f5e2ff3af6e6d05c7fdfe158f83bd0b6b
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).