General
- Target e4d8018d4c4b0b2adc32e26c0dc05a8ae405e9de1e384fdaf194d7cee3d82bbc
- Size 69KB
- Sample240611-e1l4zstgnc
- SHA256 e4d8018d4c4b0b2adc32e26c0dc05a8ae405e9de1e384fdaf194d7cee3d82bbc
- MD5 bbca920ee6f6bf1884639bd653a5505f
- SHA1 978f64b1db7689d2161deb7fe4b739d3e4e50754
- SHA512 6bca8cbd30b38d511f79d9df12a7bc69eb1f0abbdba3d10ac4a91f28011bb6461215a7539d6948de5ec77185e0fc451081a9c5719a3d514711043d0c401236c9
- SSDEEP 768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXch:a7ZyqaFAlsr1++PJHJXFAIuZAIud
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
e4d8018d4c4b0b2adc32e26c0dc05a8ae405e9de1e384fdaf194d7cee3d82bbc.exe
Resource
win7-20240419-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e4d8018d4c4b0b2adc32e26c0dc05a8ae405e9de1e384fdaf194d7cee3d82bbc.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target e4d8018d4c4b0b2adc32e26c0dc05a8ae405e9de1e384fdaf194d7cee3d82bbc
- Size 69KB
- SHA256 e4d8018d4c4b0b2adc32e26c0dc05a8ae405e9de1e384fdaf194d7cee3d82bbc
- MD5 bbca920ee6f6bf1884639bd653a5505f
- SHA1 978f64b1db7689d2161deb7fe4b739d3e4e50754
- SHA512 6bca8cbd30b38d511f79d9df12a7bc69eb1f0abbdba3d10ac4a91f28011bb6461215a7539d6948de5ec77185e0fc451081a9c5719a3d514711043d0c401236c9
- SSDEEP 768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXch:a7ZyqaFAlsr1++PJHJXFAIuZAIud
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3725) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)