General
-
Target
28b4e88ee7bbaedc65246723af1e64da3081cb71080afd4351c463ac722bbec1
-
Size
57KB
-
Sample
240524-ympshaha9s
-
MD5
73cb66c0a8327950f74f74c97f5ee355
-
SHA1
78430083b1e28dc8075a011dc907bb24cef43e41
-
SHA256
28b4e88ee7bbaedc65246723af1e64da3081cb71080afd4351c463ac722bbec1
-
SHA512
7a0d11ae52435440c5ee7bd344e528d7cb8a23a87c120b9187b8a14209595fde54017d6b9f39eddeb4fbc72c4b00b847fa0ee452e8df385878801fb4b86d6199
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8yiAyI8yIs:KQSoLSs
Behavioral task
behavioral1
Sample
28b4e88ee7bbaedc65246723af1e64da3081cb71080afd4351c463ac722bbec1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28b4e88ee7bbaedc65246723af1e64da3081cb71080afd4351c463ac722bbec1.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
28b4e88ee7bbaedc65246723af1e64da3081cb71080afd4351c463ac722bbec1
-
Size
57KB
-
MD5
73cb66c0a8327950f74f74c97f5ee355
-
SHA1
78430083b1e28dc8075a011dc907bb24cef43e41
-
SHA256
28b4e88ee7bbaedc65246723af1e64da3081cb71080afd4351c463ac722bbec1
-
SHA512
7a0d11ae52435440c5ee7bd344e528d7cb8a23a87c120b9187b8a14209595fde54017d6b9f39eddeb4fbc72c4b00b847fa0ee452e8df385878801fb4b86d6199
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8yiAyI8yIs:KQSoLSs
Score9/10-
Renames multiple (3765) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)
-