General
-
Target
-
Size
120KB
-
Sample
240131-qdlqgscgd6
-
MD5
863d4e0cab90ec8f20290da01e12cfee
-
SHA1
6faf5098fdbc081bc0e479c33d13e3391b3c7ead
-
SHA256
34c899b4970c2fc2cab0ddc1d4d6b4ac8181b0cdf71cd3832e1b817b8e1930d4
-
SHA512
55ef81984f2e87c32a172dadd18bcbc9ed989e13670915a61d1fceacd87b58dd9aa515167013045f98e8c739d7ec04b51271b1d0941b444b29c8ee4dcad3fbcf
-
SSDEEP
768:G3SOA2NuHRZ94EnzsbQU4YNaFAVVnSIW0vE:p/940zSEYNNVVtW0vE
Static task
static1
Malware Config
Extracted
C:\Users\Admin\Desktop\Readme.txt
Targets
-
-
Target
-
Size
120KB
-
MD5
863d4e0cab90ec8f20290da01e12cfee
-
SHA1
6faf5098fdbc081bc0e479c33d13e3391b3c7ead
-
SHA256
34c899b4970c2fc2cab0ddc1d4d6b4ac8181b0cdf71cd3832e1b817b8e1930d4
-
SHA512
55ef81984f2e87c32a172dadd18bcbc9ed989e13670915a61d1fceacd87b58dd9aa515167013045f98e8c739d7ec04b51271b1d0941b444b29c8ee4dcad3fbcf
-
SSDEEP
768:G3SOA2NuHRZ94EnzsbQU4YNaFAVVnSIW0vE:p/940zSEYNNVVtW0vE
Score10/10-
Renames multiple (8819) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-