General
-
Target
5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c
-
Size
50KB
-
Sample
240602-2hrm3she5w
-
MD5
c95e49ebb28fe91116e5b9b066f05097
-
SHA1
1724a0aec014cb588754af713f2597ce41ace5c8
-
SHA256
5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c
-
SHA512
ab0e9133998355cf90ae90d103f6bdb823b06046d962cf2a1df8a621135f536b153e6325a760221c2e7208e6955f249b6a1a810ab93aa27f0ca9513077f32536
-
SSDEEP
768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFFH:CTWn1++PJHJXA/OsIZfzc3/Q8F5W5o
Behavioral task
behavioral1
Sample
5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c
-
Size
50KB
-
MD5
c95e49ebb28fe91116e5b9b066f05097
-
SHA1
1724a0aec014cb588754af713f2597ce41ace5c8
-
SHA256
5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c
-
SHA512
ab0e9133998355cf90ae90d103f6bdb823b06046d962cf2a1df8a621135f536b153e6325a760221c2e7208e6955f249b6a1a810ab93aa27f0ca9513077f32536
-
SSDEEP
768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFFH:CTWn1++PJHJXA/OsIZfzc3/Q8F5W5o
Score9/10-
Renames multiple (3549) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)
-