General
- Target b0fc12e028d3e7bcdb1c211489462146
- Size 142KB
- Sample231215-d4l3qaacdn
- SHA256 db3ca15d85040a3e6f308312067950bcbd7501143f84a0607f997d4bd953b860
- MD5 b0fc12e028d3e7bcdb1c211489462146
- SHA1 598a0864cf6dd7b06c053d4f00531183301370d8
- SHA512 866391a2ad58cf49eef66964f426361eb42ab15ee76370374fc03e2a6d7191fb6b3c3649c256afd804be0e365253ffbc9f46ff137a7e1cf67be76416b827198c
- SSDEEP 3072:DEiv/DBrTbpV3O7+U39YW2ik3UHMojxiauAXnuw5wKFI9NSv3PIhWL0:DEiv/hb7zs9uAX1wt9A3QoI
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b0fc12e028d3e7bcdb1c211489462146.exe
Resource
win7-20231201-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
b0fc12e028d3e7bcdb1c211489462146.exe
Resource
win10v2004-20231127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target b0fc12e028d3e7bcdb1c211489462146
- Size 142KB
- SHA256 db3ca15d85040a3e6f308312067950bcbd7501143f84a0607f997d4bd953b860
- MD5 b0fc12e028d3e7bcdb1c211489462146
- SHA1 598a0864cf6dd7b06c053d4f00531183301370d8
- SHA512 866391a2ad58cf49eef66964f426361eb42ab15ee76370374fc03e2a6d7191fb6b3c3649c256afd804be0e365253ffbc9f46ff137a7e1cf67be76416b827198c
- SSDEEP 3072:DEiv/DBrTbpV3O7+U39YW2ik3UHMojxiauAXnuw5wKFI9NSv3PIhWL0:DEiv/hb7zs9uAX1wt9A3QoI
- MD5 SHA1 SHA512 SSDEEP
Score10/10Renames multiple (114) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.