General
- Target e3816d0857c5a1e52d9879280e70567eee968ecfc338a87364427f9d5860ea4c
- Size 70KB
- Sample240530-evgmbafb44
- SHA256 e3816d0857c5a1e52d9879280e70567eee968ecfc338a87364427f9d5860ea4c
- MD5 f1582db9480b412e8d8c50b8535783d4
- SHA1 7d3f8741fdcefd06d3e68be39ed0361726e40c2b
- SHA512 b488329319ac9c6365372eb5cfbb1c663b63d00bec46bfac6f18ad126e5a9b6da2b8978ee83cf0626776c2e6ee2c3754ac9f11f7c042878ba3d44c5145a6c229
- SSDEEP 768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmzWzXU4:67Zf/FAxTWY1++PJHJXA/OsIZpPEIUs
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
e3816d0857c5a1e52d9879280e70567eee968ecfc338a87364427f9d5860ea4c.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e3816d0857c5a1e52d9879280e70567eee968ecfc338a87364427f9d5860ea4c.exe
Resource
win10v2004-20240426-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target e3816d0857c5a1e52d9879280e70567eee968ecfc338a87364427f9d5860ea4c
- Size 70KB
- SHA256 e3816d0857c5a1e52d9879280e70567eee968ecfc338a87364427f9d5860ea4c
- MD5 f1582db9480b412e8d8c50b8535783d4
- SHA1 7d3f8741fdcefd06d3e68be39ed0361726e40c2b
- SHA512 b488329319ac9c6365372eb5cfbb1c663b63d00bec46bfac6f18ad126e5a9b6da2b8978ee83cf0626776c2e6ee2c3754ac9f11f7c042878ba3d44c5145a6c229
- SSDEEP 768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmzWzXU4:67Zf/FAxTWY1++PJHJXA/OsIZpPEIUs
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3447) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)