General
-
Target
87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232
-
Size
139KB
-
Sample
240611-aj3ceswemh
-
MD5
bb33b252ce861d718cd4230a573c5c80
-
SHA1
deba0a20be715040bb06176f8bbf1171e5f20c44
-
SHA256
87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232
-
SHA512
c803ad65509bf1f17abe7fc590b155e3aa95acadc294cb671475d811fbb9c13b7a15fd0115214870223e6af384870ac6b58dffc599ab9d257ed0f400771d8c5c
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsTq5q9BVI2IwTWn1++PJHJXA/OsIl:fnyiQSohsUsWU9BK34QSohsUsWU9BK3T
Behavioral task
behavioral1
Sample
87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232
-
Size
139KB
-
MD5
bb33b252ce861d718cd4230a573c5c80
-
SHA1
deba0a20be715040bb06176f8bbf1171e5f20c44
-
SHA256
87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232
-
SHA512
c803ad65509bf1f17abe7fc590b155e3aa95acadc294cb671475d811fbb9c13b7a15fd0115214870223e6af384870ac6b58dffc599ab9d257ed0f400771d8c5c
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsTq5q9BVI2IwTWn1++PJHJXA/OsIl:fnyiQSohsUsWU9BK34QSohsUsWU9BK3T
Score9/10-
Renames multiple (578) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)
-