General
-
Target
119b55447703c19541eddb96500760104893a136faaf87b46c2871c5a1e7d926
-
Size
7KB
-
Sample
221021-tl2y8aebhj
-
MD5
177068f72d69a4594bc3721fc9c1d6f0
-
SHA1
a24fe2857a2386e2413afa1c7476110cfa7319b9
-
SHA256
119b55447703c19541eddb96500760104893a136faaf87b46c2871c5a1e7d926
-
SHA512
de8b5f7155f330d60d17d07c6517285638148392c189e5c8470e1ded83ccf16b10d7499cb2994aed5d514d5fedc980f72bf7901dc98d62e8220abea6db3c79d3
-
SSDEEP
192:czdrrOFG1WDCgmjPZPxLTLzdtPJftqGMUA:cprrOgkDCgS/HTFtPMB
Behavioral task
behavioral1
Sample
119b55447703c19541eddb96500760104893a136faaf87b46c2871c5a1e7d926.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
119b55447703c19541eddb96500760104893a136faaf87b46c2871c5a1e7d926.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
119b55447703c19541eddb96500760104893a136faaf87b46c2871c5a1e7d926
-
Size
7KB
-
MD5
177068f72d69a4594bc3721fc9c1d6f0
-
SHA1
a24fe2857a2386e2413afa1c7476110cfa7319b9
-
SHA256
119b55447703c19541eddb96500760104893a136faaf87b46c2871c5a1e7d926
-
SHA512
de8b5f7155f330d60d17d07c6517285638148392c189e5c8470e1ded83ccf16b10d7499cb2994aed5d514d5fedc980f72bf7901dc98d62e8220abea6db3c79d3
-
SSDEEP
192:czdrrOFG1WDCgmjPZPxLTLzdtPJftqGMUA:cprrOgkDCgS/HTFtPMB
Score10/10-
Detected Xorist Ransomware
-
Drops file in Drivers directory
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Adds Run key to start application
-
Drops file in System32 directory
-