bs03u4lh.exe
Windows Exe (x86-32)
Created at 2019-05-21T16:12:00
VMRay Threat Indicators (9 rules, 9 matches)
| Severity | Category | Operation | Count | Classification | |
|---|---|---|---|---|---|
|
5/5
|
Local AV | Malicious content was detected by heuristic scan | 1 | - | |
|
|||||
|
5/5
|
Device | Writes to Master Boot Record (MBR) | 1 | - | |
|
|||||
|
4/5
|
File System | Modifies content of user files | 1 | Ransomware | |
|
|||||
|
4/5
|
File System | Renames user files | 1 | Ransomware | |
|
|||||
|
4/5
|
OS | Modifies Windows automatic backups | 1 | - | |
|
|||||
|
3/5
|
File System | Possibly drops ransom note files | 1 | Ransomware | |
|
|||||
|
2/5
|
Anti Analysis | Resolves APIs dynamically to possibly evade static detection | 1 | - | |
|
|||||
|
2/5
|
OS | Changes the desktop wallpaper. | 1 | - | |
|
|||||
|
1/5
|
Process | Creates process with hidden window | 1 | - | |
|
|||||
Screenshots
Monitored Processes
Sample Information
| ID | #657417 |
| MD5 |
6d21c5c3bcff6076179bccd9ea6d1464
|
| SHA1 |
75aa1e3404aaab3a11ee7cb2f7e3682145fa6324
|
| SHA256 |
8d833937f4da8ab0269850f961e8a9f963c23e6bef04a31af925a152f01a1169
|
| SSDeep |
12288:8mC4VMy4L1rWXVr0YHM9Jl0VXRqg+i04c3nPwhOCVbSB:Wy4L5WXXs9JSVX4eo3YhfbS
|
| ImpHash |
f4701b864eddb48ab5f95477b57d06c2
|
| Filename | bs03u4lh.exe |
| File Size | 693.00 KB |
| Sample Type | Windows Exe (x86-32) |
Analysis Information
| Creation Time | 2019-05-21 18:12 (UTC+2) |
| Analysis Duration | 00:05:26 |
| Number of Monitored Processes | 3 |
| Execution Successful |
|
| Reputation Enabled |
|
| WHOIS Enabled |
|
| Local AV Enabled |
|
| YARA Enabled |
|
| Number of AV Matches | 1 |
| Number of YARA Matches | 0 |
| Termination Reason | Timeout |
| Tags |
