General
-
Target
65196064e978174aedfcc1913e75e530_NEAS
-
Size
116KB
-
Sample
240507-eywweacd99
-
MD5
65196064e978174aedfcc1913e75e530
-
SHA1
1e12aae816d32d3ac3a03cf234c5121ad7c26495
-
SHA256
02c9807cc916eee30fc839a2c0a9f1d1bab23a82a67e7779538ee61144fe6909
-
SHA512
526fdd56d79c73b9195190e480f73c711a2eb869a6b54092f5c376661c380d6c4da0eabf74e41d0f9c73568ea28689aaa2729fb2d679b6316a892e1c756642a8
-
SSDEEP
3072:6rWpcOPxPke+e3fFpsJOfFpsJbgE2GEJdwJdXgX37:tFPxPke+eI2GRgX37
Static task
static1
Behavioral task
behavioral1
Sample
65196064e978174aedfcc1913e75e530_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65196064e978174aedfcc1913e75e530_NEAS.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
65196064e978174aedfcc1913e75e530_NEAS
-
Size
116KB
-
MD5
65196064e978174aedfcc1913e75e530
-
SHA1
1e12aae816d32d3ac3a03cf234c5121ad7c26495
-
SHA256
02c9807cc916eee30fc839a2c0a9f1d1bab23a82a67e7779538ee61144fe6909
-
SHA512
526fdd56d79c73b9195190e480f73c711a2eb869a6b54092f5c376661c380d6c4da0eabf74e41d0f9c73568ea28689aaa2729fb2d679b6316a892e1c756642a8
-
SSDEEP
3072:6rWpcOPxPke+e3fFpsJOfFpsJbgE2GEJdwJdXgX37:tFPxPke+eI2GRgX37
Score9/10-
Renames multiple (519) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-