General
- Target 52802de3063c69821e7ebbd0fdb1f54d2b138bc174d42c2cfce5157129413461
- Size 165KB
- Sample240601-1eyrjsfe7s
- SHA256 52802de3063c69821e7ebbd0fdb1f54d2b138bc174d42c2cfce5157129413461
- MD5 0fcf05d1b7b0f19503834a7527ed0352
- SHA1 721881e5da2d7ab2640bbe9f995caf730957521b
- SHA512 6b6caeaf2cd6cab9e4c937fff4a0f82fa83881da712903a82e6465523c6f089189cd9b56e5d6640cd251c82dadaf8cc1082f1d609c45e00bb8eb07e3fd72af3f
- SSDEEP 1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJBL:KQSo1EZGtKgZGtK/PgtU1wAIuZAIub
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
52802de3063c69821e7ebbd0fdb1f54d2b138bc174d42c2cfce5157129413461.exe
Resource
win7-20240220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
52802de3063c69821e7ebbd0fdb1f54d2b138bc174d42c2cfce5157129413461.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 52802de3063c69821e7ebbd0fdb1f54d2b138bc174d42c2cfce5157129413461
- Size 165KB
- SHA256 52802de3063c69821e7ebbd0fdb1f54d2b138bc174d42c2cfce5157129413461
- MD5 0fcf05d1b7b0f19503834a7527ed0352
- SHA1 721881e5da2d7ab2640bbe9f995caf730957521b
- SHA512 6b6caeaf2cd6cab9e4c937fff4a0f82fa83881da712903a82e6465523c6f089189cd9b56e5d6640cd251c82dadaf8cc1082f1d609c45e00bb8eb07e3fd72af3f
- SSDEEP 1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJBL:KQSo1EZGtKgZGtK/PgtU1wAIuZAIub
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3438) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)