General
- Target 22222.exe
- Size 112KB
- Sample201127-rptenzpsjs
- SHA256 e90cd8761306b7ee94fa9561e36a49323edb9a6e27213def9ecc93dbae3f2fb7
- MD5 429a052071b8a18293ab4f849cb80b97
- SHA1 c361bc4d23493335b4bd4d505b8e447a18b15b8d
- SHA512 f90d6ada90505500b954a5ba348787bc5442842253b89b74bb0775281cfb0ba387d4d932a49c76c317f842f72e1003fd4e0dd1b4ada7e1dbc8457d445ba28e47
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
22222.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
22222.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 22222.exe
- Size 112KB
- SHA256 e90cd8761306b7ee94fa9561e36a49323edb9a6e27213def9ecc93dbae3f2fb7
- MD5 429a052071b8a18293ab4f849cb80b97
- SHA1 c361bc4d23493335b4bd4d505b8e447a18b15b8d
- SHA512 f90d6ada90505500b954a5ba348787bc5442842253b89b74bb0775281cfb0ba387d4d932a49c76c317f842f72e1003fd4e0dd1b4ada7e1dbc8457d445ba28e47
- MD5 SHA1 SHA512
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.