General
- Target d9ca0154c16f8ddfd39a47a8f13fb74b53262d3bdad17af6d6f3a85630f677b6
- Size 68KB
- Sample240611-efs2sstglm
- SHA256 d9ca0154c16f8ddfd39a47a8f13fb74b53262d3bdad17af6d6f3a85630f677b6
- MD5 3ce6614285cbc7e683b7ec8b56b89095
- SHA1 ce4a8354155414403b0fa3f73d1bb8bb299b6caf
- SHA512 ff41f45e3e4928dfeae61bd6db4e9c5a3789c818d923dda4a0a6de9dcf154f1eae4ac9b37681e8803ab6a783686b2def6a99d709565463b5bbef2c34a064668d
- SSDEEP 1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx6:fnyiQSoH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
d9ca0154c16f8ddfd39a47a8f13fb74b53262d3bdad17af6d6f3a85630f677b6.exe
Resource
win7-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
d9ca0154c16f8ddfd39a47a8f13fb74b53262d3bdad17af6d6f3a85630f677b6.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target d9ca0154c16f8ddfd39a47a8f13fb74b53262d3bdad17af6d6f3a85630f677b6
- Size 68KB
- SHA256 d9ca0154c16f8ddfd39a47a8f13fb74b53262d3bdad17af6d6f3a85630f677b6
- MD5 3ce6614285cbc7e683b7ec8b56b89095
- SHA1 ce4a8354155414403b0fa3f73d1bb8bb299b6caf
- SHA512 ff41f45e3e4928dfeae61bd6db4e9c5a3789c818d923dda4a0a6de9dcf154f1eae4ac9b37681e8803ab6a783686b2def6a99d709565463b5bbef2c34a064668d
- SSDEEP 1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx6:fnyiQSoH
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3701) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)