Extracted

• • Target

    CAD.bin

  • Size

    261KB

  • MD5

    1c249309871bae43fe787df7976df355

  • SHA1

    12da8b967fd7a4a64f3836372430c5862ee24528

  • SHA256

    8a1d46b80f61c17f62139c1b46be9208e09055e821d8bed59532089fa5b21b48

  • SHA512

    8127487529543ff3d5240bc4ea7fc3c6dd8f802ea522267c3b73224dfc13bbcac311c521c636f5874306d9694e19d1e71a1b4d25b2ac1c57d1a82d095ce47d73

  Score

  10^/10

  ransomwarespywarestealer

  • Modifies extensions of user files

    Ransomware generally changes the extension on encrypted files.

    ransomware

  • Drops startup file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Drops desktop.ini file(s)

  behavioral1behavioral2