5776d8c0dcc3290fe64a29854fd38cec39c88ce486819b4406b56b81f919c797

General

Target

5776d8c0dcc3290fe64a29854fd38cec39c88ce486819b4406b56b81f919c797
Size

211KB
Sample

220724-17pz4safck
MD5

35d70940293267a2e4f2355ed6c38dea
SHA1

ec7f1137861345111e21376de337932e2ee59d84
SHA256

5776d8c0dcc3290fe64a29854fd38cec39c88ce486819b4406b56b81f919c797
SHA512

d86f53b9f5ca110c4ee6249db8be5606c7d027f4214cddf6abbafbdca4e8f324aa03710ae907275b12fe79f0d654978fab56985bd129ad006a13cad625f75e54

Score

10^/10

Malware Config

Targets

- Target
  
  5776d8c0dcc3290fe64a29854fd38cec39c88ce486819b4406b56b81f919c797
- Size
  
  211KB
- MD5
  
  35d70940293267a2e4f2355ed6c38dea
- SHA1
  
  ec7f1137861345111e21376de337932e2ee59d84
- SHA256
  
  5776d8c0dcc3290fe64a29854fd38cec39c88ce486819b4406b56b81f919c797
- SHA512
  
  d86f53b9f5ca110c4ee6249db8be5606c7d027f4214cddf6abbafbdca4e8f324aa03710ae907275b12fe79f0d654978fab56985bd129ad006a13cad625f75e54
Score

10^/10

discovery ransomware spyware stealer suricata
- suricata: ET MALWARE Ransomware/Cerber Checkin 2
  suricata: ET MALWARE Ransomware/Cerber Checkin 2
  suricata
- suricata: ET MALWARE Ransomware/Cerber Checkin M3 (3)
  suricata: ET MALWARE Ransomware/Cerber Checkin M3 (3)
  suricata
- suricata: ET MALWARE Ransomware/Cerber Checkin M3 (6)
  suricata: ET MALWARE Ransomware/Cerber Checkin M3 (6)
  suricata
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Contacts a large (512) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Contacts a large (527) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Sets desktop wallpaper using registry
  ransomware
- Suspicious use of SetThreadContext
behavioral1 behavioral2