8ebf2ae4c362f76d402703efe3dc095901f2d78917f88a520b67584a7d8f291e (SHA256)
LIGMA.exe
Created at 2018-09-08 08:53:00
Notifications (2/3)
The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.
The overall sleep time of all monitored processes was truncated from "1 minute, 15 seconds" to "30 seconds" to reveal dormant functionality.
The operating system was rebooted during the analysis.
Severity | Category | Operation | Classification | |
---|---|---|---|---|
5/5
|
Device | Writes to Master Boot Record (MBR) | - | |
|
||||
4/5
|
File System | Modifies content of user files | Ransomware | |
|
||||
4/5
|
File System | Deletes user files | Wiper | |
|
||||
4/5
|
OS | Disables a crucial system tool | - | |
|
||||
4/5
|
File System | Known malicious file | Trojan | |
|
||||
3/5
|
OS | Modifies system security configuration | - | |
|
||||
3/5
|
OS | Modifies system configuration | - | |
|
||||
2/5
|
Device | Accesses physical drive | - | |
|
||||
2/5
|
Anti Analysis | Tries to detect virtual machine | - | |
|
||||
1/5
|
Process | Creates process with hidden window | - | |
|
||||
1/5
|
File System | Creates an unusually large number of files | - | |
|
||||
1/5
|
PE | Drops PE file | Dropper | |
|