General
-
Target
NEAS.81f6e97e670396c714ff3624ac24b930.exe
-
Size
102KB
-
Sample
231013-y9vl9sbf3y
-
MD5
81f6e97e670396c714ff3624ac24b930
-
SHA1
288e1e9c8fd792314b44c07e01a915d2de90e814
-
SHA256
5d6458a2f088ba6c1d276109dbc6c8609d9e214acdbc999ebc4ec11bda3758fa
-
SHA512
d700c011ec0e661006ebbd0e46a4a1ec893200e664feb15ed60db53fbce9d3682170428ef8f66fdc04d5a8096a4b19ee0bff049750f3c6120e6815f409c52a52
-
SSDEEP
1536:W7ZhA7pApb0Da0DOlcgTcTSbyEmOTcTSbyEmAlJOblJOJRD:6e7Wp9TcTSWEmOTcTSWEm8
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.81f6e97e670396c714ff3624ac24b930.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.81f6e97e670396c714ff3624ac24b930.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
NEAS.81f6e97e670396c714ff3624ac24b930.exe
-
Size
102KB
-
MD5
81f6e97e670396c714ff3624ac24b930
-
SHA1
288e1e9c8fd792314b44c07e01a915d2de90e814
-
SHA256
5d6458a2f088ba6c1d276109dbc6c8609d9e214acdbc999ebc4ec11bda3758fa
-
SHA512
d700c011ec0e661006ebbd0e46a4a1ec893200e664feb15ed60db53fbce9d3682170428ef8f66fdc04d5a8096a4b19ee0bff049750f3c6120e6815f409c52a52
-
SSDEEP
1536:W7ZhA7pApb0Da0DOlcgTcTSbyEmOTcTSbyEmAlJOblJOJRD:6e7Wp9TcTSWEmOTcTSWEm8
Score9/10-
Renames multiple (74) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-