General
-
Target
95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66
-
Size
233KB
-
Sample
230327-j6c6gsce22
-
MD5
fac9cffeb62bbbc64879251cef8f0cb4
-
SHA1
949780ecf307a4ebb08b3d64a7f66fc51d756409
-
SHA256
95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66
-
SHA512
411c4b2ce9d67580f66391a8f50f59b79041632512527f8df28b5598718a5ddd3a63e06dc388d2bd6d3aa0849d34a114658104ed05a50d6282dd0b24f7b6f66f
-
SSDEEP
6144:ax7axHUjUgjkVM3ySQb46hmcSOL1QoNyh:ajJkVhpb46hnSM1QE
Static task
static1
Behavioral task
behavioral1
Sample
95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66
-
Size
233KB
-
MD5
fac9cffeb62bbbc64879251cef8f0cb4
-
SHA1
949780ecf307a4ebb08b3d64a7f66fc51d756409
-
SHA256
95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66
-
SHA512
411c4b2ce9d67580f66391a8f50f59b79041632512527f8df28b5598718a5ddd3a63e06dc388d2bd6d3aa0849d34a114658104ed05a50d6282dd0b24f7b6f66f
-
SSDEEP
6144:ax7axHUjUgjkVM3ySQb46hmcSOL1QoNyh:ajJkVhpb46hnSM1QE
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-