General
-
Target
922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411
-
Size
12KB
-
Sample
221127-bh19eada2x
-
MD5
0dfd45af14c6abff59e905ade61a4b75
-
SHA1
6ad311da73780d44b3a9010743729dfd3bbbc24f
-
SHA256
922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411
-
SHA512
6815237299cfc8b36a8e6c1f1652a59ffa2a55b8d4cf83a00ab3372f910ee73738607b08cc7b2c88ece3857d1ae074d641ab492d0dd3f51f29c0688cdbf09781
-
SSDEEP
192:x/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRM3W8r:xebFNw4Pk1itKkpAjjJs6B40W3W8r
Behavioral task
behavioral1
Sample
922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411
-
Size
12KB
-
MD5
0dfd45af14c6abff59e905ade61a4b75
-
SHA1
6ad311da73780d44b3a9010743729dfd3bbbc24f
-
SHA256
922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411
-
SHA512
6815237299cfc8b36a8e6c1f1652a59ffa2a55b8d4cf83a00ab3372f910ee73738607b08cc7b2c88ece3857d1ae074d641ab492d0dd3f51f29c0688cdbf09781
-
SSDEEP
192:x/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRM3W8r:xebFNw4Pk1itKkpAjjJs6B40W3W8r
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Adds Run key to start application
-