General
- Target a79adc37a723dd89014f01158a19cecc.exe
- Size 292KB
- Sample220131-es4dasfdh3
- SHA256 1bba4e037532af6aa204171b9022d6d5de22aaa248f3199a9c15802fced787f2
Score
10/10
Malware Config
Targets
-
- Target a79adc37a723dd89014f01158a19cecc.exe
- Size 292KB
- SHA256 1bba4e037532af6aa204171b9022d6d5de22aaa248f3199a9c15802fced787f2
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Blocklisted process makes network request
-
Deletes itself
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory