General
- Target ee1b20048c96b1150fef4303e7d063952f4a1a44260bc9ecc1aaefe200e3bbe9
- Size 71KB
- Sample240530-fectvsgb45
- SHA256 ee1b20048c96b1150fef4303e7d063952f4a1a44260bc9ecc1aaefe200e3bbe9
- MD5 6b33a8894164a39c2780c5b89cc01af0
- SHA1 5f5f645d803bb514b5a2605d2c0b2bf924b7e8ad
- SHA512 e1dbf8bc07123b26c122a657fbb15095db10b893a92609a5e749460e0f1c4a757d730128bbe142b49ee419aee282fcf980b9e5b35853db73bc56ead2c5583ab4
- SSDEEP 1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8DvZ:+nyiQSoG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ee1b20048c96b1150fef4303e7d063952f4a1a44260bc9ecc1aaefe200e3bbe9.exe
Resource
win7-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee1b20048c96b1150fef4303e7d063952f4a1a44260bc9ecc1aaefe200e3bbe9.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ee1b20048c96b1150fef4303e7d063952f4a1a44260bc9ecc1aaefe200e3bbe9
- Size 71KB
- SHA256 ee1b20048c96b1150fef4303e7d063952f4a1a44260bc9ecc1aaefe200e3bbe9
- MD5 6b33a8894164a39c2780c5b89cc01af0
- SHA1 5f5f645d803bb514b5a2605d2c0b2bf924b7e8ad
- SHA512 e1dbf8bc07123b26c122a657fbb15095db10b893a92609a5e749460e0f1c4a757d730128bbe142b49ee419aee282fcf980b9e5b35853db73bc56ead2c5583ab4
- SSDEEP 1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8DvZ:+nyiQSoG
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3674) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)