General
- Target WindowsFormsApp1.exe
- Size 117KB
- Sample220112-xlrd9sdfhm
- SHA256 bb0bca92cc74cac6b770649c5e70b0f4fd177de58fcfc7c719223485624dc28b
- MD5 e7138eb2f838114591d0917050710bff
- SHA1 55f4b508ed4ed8e6650057b7a7538fda9dbdf2e7
- SHA512 09a05490a40a05e1df42022742512a417c1a6970c06f32e445fb4aa12a123ea72f7cb2ed4da1ac1365229114c18578ae3e4baecbd653f81b77cf750a86554cc2
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
WindowsFormsApp1.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
WindowsFormsApp1.exe
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target WindowsFormsApp1.exe
- Size 117KB
- SHA256 bb0bca92cc74cac6b770649c5e70b0f4fd177de58fcfc7c719223485624dc28b
- MD5 e7138eb2f838114591d0917050710bff
- SHA1 55f4b508ed4ed8e6650057b7a7538fda9dbdf2e7
- SHA512 09a05490a40a05e1df42022742512a417c1a6970c06f32e445fb4aa12a123ea72f7cb2ed4da1ac1365229114c18578ae3e4baecbd653f81b77cf750a86554cc2
- MD5 SHA1 SHA512
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)