General
-
Target
NEAS.c8f9c68dc6951f56050850756e29ef45.exe
-
Size
203KB
-
Sample
231117-vtvesabf38
-
MD5
c8f9c68dc6951f56050850756e29ef45
-
SHA1
868f2356f48589500e5f202c85ea2f09904979cd
-
SHA256
575678393675049734974c44d3c9a597f39a43c19a3377254ee0830840ecc340
-
SHA512
ab766d2664ea7bab6031dcf4acd855166f00d510a02161145c64ad50cb673065e99b16a26cd97ac9c6a28c04f686381bbb2f098a648533fcfad9dad275199c79
-
SSDEEP
768:W7BlphA7pARFbhKKVeIuKVeIaCgx+qsaCgx+qswPNPz1Y+l:W7ZhA7pApaX0aX0wPNPO+l
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c8f9c68dc6951f56050850756e29ef45.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.c8f9c68dc6951f56050850756e29ef45.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.c8f9c68dc6951f56050850756e29ef45.exe
-
Size
203KB
-
MD5
c8f9c68dc6951f56050850756e29ef45
-
SHA1
868f2356f48589500e5f202c85ea2f09904979cd
-
SHA256
575678393675049734974c44d3c9a597f39a43c19a3377254ee0830840ecc340
-
SHA512
ab766d2664ea7bab6031dcf4acd855166f00d510a02161145c64ad50cb673065e99b16a26cd97ac9c6a28c04f686381bbb2f098a648533fcfad9dad275199c79
-
SSDEEP
768:W7BlphA7pARFbhKKVeIuKVeIaCgx+qsaCgx+qswPNPz1Y+l:W7ZhA7pApaX0aX0wPNPO+l
Score9/10-
Renames multiple (223) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-