General
- Target WindowsFormsApp1.exe
- Size 228KB
- Sample210725-axvbkfmava
- SHA256 a3bc02793e389eca1d2d3eab3ad4925b50ad90d64d66e418789b62144a5f8f74
- MD5 8c1344abfab3ca04edc09823d638791c
- SHA1 b45968fef318759b3f82ae7759d0e284099e5617
- SHA512 9ded3851cb4ee2649639f19b2c2e882c4fecab4fa98114241dacc082d52d268c793ff082463395b8e57af8ccc69da46e016757b676d025c50e74b71da960622c
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
WindowsFormsApp1.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
WindowsFormsApp1.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target WindowsFormsApp1.exe
- Size 228KB
- SHA256 a3bc02793e389eca1d2d3eab3ad4925b50ad90d64d66e418789b62144a5f8f74
- MD5 8c1344abfab3ca04edc09823d638791c
- SHA1 b45968fef318759b3f82ae7759d0e284099e5617
- SHA512 9ded3851cb4ee2649639f19b2c2e882c4fecab4fa98114241dacc082d52d268c793ff082463395b8e57af8ccc69da46e016757b676d025c50e74b71da960622c
- MD5 SHA1 SHA512
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)