General
-
Target
d1d5538fefe9a3b4825a5c0c64fdabac06268e35471ed7eed41fdb9fe528b6bd
-
Size
58KB
-
Sample
240611-d4g4rstcjr
-
MD5
54158863fe8344e30d15c941883aa7fc
-
SHA1
d95dfafb097275262be786cabc499fd42ef050a0
-
SHA256
d1d5538fefe9a3b4825a5c0c64fdabac06268e35471ed7eed41fdb9fe528b6bd
-
SHA512
562dea3fceeedc264a56c99a05db341c15d1058965a3f8589ff11a30f70c12ec406601fb0f0e397823e52776f7da5981e9c323dbdbeafac78b5ad8c687a5aa33
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsxe+eX7n97ns1o8k1o8l:KQSohsUsxe+erZs1o8k1o8l
Behavioral task
behavioral1
Sample
d1d5538fefe9a3b4825a5c0c64fdabac06268e35471ed7eed41fdb9fe528b6bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1d5538fefe9a3b4825a5c0c64fdabac06268e35471ed7eed41fdb9fe528b6bd.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
d1d5538fefe9a3b4825a5c0c64fdabac06268e35471ed7eed41fdb9fe528b6bd
-
Size
58KB
-
MD5
54158863fe8344e30d15c941883aa7fc
-
SHA1
d95dfafb097275262be786cabc499fd42ef050a0
-
SHA256
d1d5538fefe9a3b4825a5c0c64fdabac06268e35471ed7eed41fdb9fe528b6bd
-
SHA512
562dea3fceeedc264a56c99a05db341c15d1058965a3f8589ff11a30f70c12ec406601fb0f0e397823e52776f7da5981e9c323dbdbeafac78b5ad8c687a5aa33
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsxe+eX7n97ns1o8k1o8l:KQSohsUsxe+erZs1o8k1o8l
Score9/10-
Renames multiple (610) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)
-