General
-
Target
NEAS.8f6f554bf12310a6c9d050633fa2bc20.exe
-
Size
128KB
-
Sample
231111-vkgsbsaf45
-
MD5
8f6f554bf12310a6c9d050633fa2bc20
-
SHA1
b67ed2cc08706e0ddc526cf9ca9d3145035d1563
-
SHA256
5c5b17b1ed1a0fbbf6311a9847e3635838a41aad0e2377917db2c384d6817f92
-
SHA512
1309e0c952fa6789264e73f7b57b4c794187291f9bf0ce46a3565dbd301c37033e7968611533b572ee858cd3490f21479686c26f352fc26a9e7021edb102ea9d
-
SSDEEP
3072:6e7WpHIyRF9ESWu0SWuDmSXrw3Mtr0s8P436:RqlIyFESWu0SWu2s8P436
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8f6f554bf12310a6c9d050633fa2bc20.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8f6f554bf12310a6c9d050633fa2bc20.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.8f6f554bf12310a6c9d050633fa2bc20.exe
-
Size
128KB
-
MD5
8f6f554bf12310a6c9d050633fa2bc20
-
SHA1
b67ed2cc08706e0ddc526cf9ca9d3145035d1563
-
SHA256
5c5b17b1ed1a0fbbf6311a9847e3635838a41aad0e2377917db2c384d6817f92
-
SHA512
1309e0c952fa6789264e73f7b57b4c794187291f9bf0ce46a3565dbd301c37033e7968611533b572ee858cd3490f21479686c26f352fc26a9e7021edb102ea9d
-
SSDEEP
3072:6e7WpHIyRF9ESWu0SWuDmSXrw3Mtr0s8P436:RqlIyFESWu0SWu2s8P436
Score9/10-
Renames multiple (526) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-