General
- Target 7fd786dbfaa40fb79f01fb6a57c8ac830aa2aa2d133d99efd595daa8884edaa3
- Size 359KB
- Sample240601-3dnajabb73
- SHA256 7fd786dbfaa40fb79f01fb6a57c8ac830aa2aa2d133d99efd595daa8884edaa3
- MD5 663662ca257f021a14be1f304e41842e
- SHA1 0fbc74d559801f09c1f7bdee91b2fca479e7c033
- SHA512 1c99806f2690d81b2c7cea3a9df3083b95c5dd4f49b79c7e4bf4f7da25ee3fb3b36ba9b29abd4e17b22e8f56b6332d693c6f93aeb4902abae67ddd26743acb1d
- SSDEEP 6144:KiQSo1EZGtKgZGtK/CAIuZAIu4QSo1EZGtKgZGtK/CAIuZAIu+:VQtyZGtKgZGtK/CAIuZAIu4QtyZGtKgf
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
7fd786dbfaa40fb79f01fb6a57c8ac830aa2aa2d133d99efd595daa8884edaa3.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
7fd786dbfaa40fb79f01fb6a57c8ac830aa2aa2d133d99efd595daa8884edaa3.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 7fd786dbfaa40fb79f01fb6a57c8ac830aa2aa2d133d99efd595daa8884edaa3
- Size 359KB
- SHA256 7fd786dbfaa40fb79f01fb6a57c8ac830aa2aa2d133d99efd595daa8884edaa3
- MD5 663662ca257f021a14be1f304e41842e
- SHA1 0fbc74d559801f09c1f7bdee91b2fca479e7c033
- SHA512 1c99806f2690d81b2c7cea3a9df3083b95c5dd4f49b79c7e4bf4f7da25ee3fb3b36ba9b29abd4e17b22e8f56b6332d693c6f93aeb4902abae67ddd26743acb1d
- SSDEEP 6144:KiQSo1EZGtKgZGtK/CAIuZAIu4QSo1EZGtKgZGtK/CAIuZAIu+:VQtyZGtKgZGtK/CAIuZAIu4QtyZGtKgf
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (2670) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)