General
- Target trash.exe
- Size 100KB
- Sample210315-mj6e5pvb66
- SHA256 4dfc17406a58c6f1ce83a73ce6dd5b343d00fe77d07dfe21d28da13631bfad90
- MD5 7f5227030be3d2ef48aa652af1ec72b0
- SHA1 202e7ac1c2aaca8fbeed4ac454ca195a33c9d064
- SHA512 4603b758416dac60cb322aae6f3566711b6a4a9b657f6448861553b45b1c737fd3180d2b0bc169ef193a2372e89aba14a4d27a25e0a5eb440ed6c4afafe5f55c
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
trash.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
trash.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target trash.exe
- Size 100KB
- SHA256 4dfc17406a58c6f1ce83a73ce6dd5b343d00fe77d07dfe21d28da13631bfad90
- MD5 7f5227030be3d2ef48aa652af1ec72b0
- SHA1 202e7ac1c2aaca8fbeed4ac454ca195a33c9d064
- SHA512 4603b758416dac60cb322aae6f3566711b6a4a9b657f6448861553b45b1c737fd3180d2b0bc169ef193a2372e89aba14a4d27a25e0a5eb440ed6c4afafe5f55c
- MD5 SHA1 SHA512
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Suspicious use of SetThreadContext