General
- Target 9035106690.zip
- Size 7.2MB
- Sample231018-pcgjpsec8w
- SHA256 0beba1c428f350e024253c46dc43e9fc4480fb513355edfec452d13fff38f6d0
- MD5 ef2cacf47d7cde4871c1f1d00cb8d3e6
- SHA1 05550cc73c3507a39ab9ae94a08134af2dbd11e7
- SHA512 b862a5885fd336c56419aba841aaf8a115f13ae25a59efb19d493d06e523c9548d31e82f2b2d9b2a387af90b932bc8319c8244b4fb7c9ec6a606179157b3ad25
- SSDEEP 196608:SiVR2zqrbvQBiXZU+ENVUX8lrMMd6KNkPP:LqzqAwu+oVUX8GMUKUP
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e.exe
Resource
win10v2004-20230915-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e
- Size 14.9MB
- SHA256 1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e
- MD5 97abffeaa7bdfaa81532bd6028498225
- SHA1 26ab576a0abf7085ecf6321a311a7b3088ee48ae
- SHA512 af271b15a4f64ac4965cc75f7531e28d3ea0abc90d16ae4654251a301d1a3a0b10d80b205dc626b8866c976ffacdace74f71711c73ef1240d867aeb09c47cc75
- SSDEEP 196608:aMygJ9edfbhSo5Kp8qPKlL8QgYVhqhOM8qTsSqwLM:7XJ9e1wo548qSV5VhKOeTsRwLM
- MD5 SHA1 SHA512 SSDEEP
Score10/10Renames multiple (132) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.