General
- Target caa2a47e906ff7b4d8a2cb55f36dfbc2aad1bf88be1cc38dcdfaffaae5f92e12
- Size 45KB
- Sample240611-dqd5yssblb
- SHA256 caa2a47e906ff7b4d8a2cb55f36dfbc2aad1bf88be1cc38dcdfaffaae5f92e12
- MD5 9e344e40765c687e74586eed8d51bbbf
- SHA1 44cf869d594e19f33b67c7cb151aa87e23f2e6d4
- SHA512 2e753d408582f5562e6772f430d2d6eca0298e3f80ab7ea4467378b8aa0dee5029f3c8882512edc6ed034d94bad17d5747dee369d33994da22bdea932cfd54fe
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzc:CTWn1++PJHJXA/OsIZfzc3/Q8zxy
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
caa2a47e906ff7b4d8a2cb55f36dfbc2aad1bf88be1cc38dcdfaffaae5f92e12.exe
Resource
win7-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
caa2a47e906ff7b4d8a2cb55f36dfbc2aad1bf88be1cc38dcdfaffaae5f92e12.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target caa2a47e906ff7b4d8a2cb55f36dfbc2aad1bf88be1cc38dcdfaffaae5f92e12
- Size 45KB
- SHA256 caa2a47e906ff7b4d8a2cb55f36dfbc2aad1bf88be1cc38dcdfaffaae5f92e12
- MD5 9e344e40765c687e74586eed8d51bbbf
- SHA1 44cf869d594e19f33b67c7cb151aa87e23f2e6d4
- SHA512 2e753d408582f5562e6772f430d2d6eca0298e3f80ab7ea4467378b8aa0dee5029f3c8882512edc6ed034d94bad17d5747dee369d33994da22bdea932cfd54fe
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzc:CTWn1++PJHJXA/OsIZfzc3/Q8zxy
- MD5 SHA1 SHA512 SSDEEP
Score9/10Renames multiple (3780) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
UPX dump on OEP (original entry point)