General
- Target method3.exe
- Size 676KB
- Sample210209-16dbqbgrrn
- SHA256 db33d1e7f7eefff11196927bca2e400e4950e3d78316cd17d220b85ce00dd465
- MD5 d35392ec79e0adcc02e3750867eea7b9
- SHA1 572da462afb61c110d86320c8deb86b2b01561be
- SHA512 f547dc4c2252f5f371ccee7f0235597ccc1aa4550d13618eebc593f76a3e4ea017bbcac217ea40e66ccecbd37b6296ae7bb63b51a38e58eae2d794fad11b47fb
- MD5 SHA1 SHA512
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
method3.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
method3.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target method3.exe
- Size 676KB
- SHA256 db33d1e7f7eefff11196927bca2e400e4950e3d78316cd17d220b85ce00dd465
- MD5 d35392ec79e0adcc02e3750867eea7b9
- SHA1 572da462afb61c110d86320c8deb86b2b01561be
- SHA512 f547dc4c2252f5f371ccee7f0235597ccc1aa4550d13618eebc593f76a3e4ea017bbcac217ea40e66ccecbd37b6296ae7bb63b51a38e58eae2d794fad11b47fb
- MD5 SHA1 SHA512
Score5/10-
Enumerates physical storage devices
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetThreadContext