General
-
Target
2288647d8610880e64afcb7f70bfa5beaa3d3f6c4c3926b5c578f1ded872bb95
-
Size
210KB
-
Sample
220628-tjcxbacdb5
-
MD5
dc434c62080072fa651f14410b8c9fe8
-
SHA1
7d20008cdeac01a030682efbbc7371ba1685b727
-
SHA256
2288647d8610880e64afcb7f70bfa5beaa3d3f6c4c3926b5c578f1ded872bb95
-
SHA512
c5c23ce4f3a1743fdc8d467ea59721f038deb9dfb4f11fd05b740c9f21485d6d73f66d2687d71cd19e607f4007dd7f4f316ff02dc4822c86d9e6d7b666b70d69
Static task
static1
Behavioral task
behavioral1
Sample
2288647d8610880e64afcb7f70bfa5beaa3d3f6c4c3926b5c578f1ded872bb95.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2288647d8610880e64afcb7f70bfa5beaa3d3f6c4c3926b5c578f1ded872bb95.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
2288647d8610880e64afcb7f70bfa5beaa3d3f6c4c3926b5c578f1ded872bb95
-
Size
210KB
-
MD5
dc434c62080072fa651f14410b8c9fe8
-
SHA1
7d20008cdeac01a030682efbbc7371ba1685b727
-
SHA256
2288647d8610880e64afcb7f70bfa5beaa3d3f6c4c3926b5c578f1ded872bb95
-
SHA512
c5c23ce4f3a1743fdc8d467ea59721f038deb9dfb4f11fd05b740c9f21485d6d73f66d2687d71cd19e607f4007dd7f4f316ff02dc4822c86d9e6d7b666b70d69
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
-
Suspicious use of SetThreadContext
-