General
- Target 23afc3a97c8732e4b2ef27e4058dbfe267d39e9f02ce05dc999d20c89fad8d0b
- Size 113KB
- Sample240611-ydf41ayflc
- SHA256 23afc3a97c8732e4b2ef27e4058dbfe267d39e9f02ce05dc999d20c89fad8d0b
- MD5 40718da0467867b2ee532246eef9e85a
- SHA1 a0cab4a7c944d170d35d1e1280e0cd383adde485
- SHA512 2e50f55950fe61154df3e9264a94258935f221e923c231013623f69fc4ce0880cff4afe12cf282363e2fe02b878dea79b957620e29cc68e5f2abafdb45416356
- SSDEEP 1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfagS:hfAIuZAIuYSMjoqtMHfhfagjyZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
23afc3a97c8732e4b2ef27e4058dbfe267d39e9f02ce05dc999d20c89fad8d0b.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
23afc3a97c8732e4b2ef27e4058dbfe267d39e9f02ce05dc999d20c89fad8d0b.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 23afc3a97c8732e4b2ef27e4058dbfe267d39e9f02ce05dc999d20c89fad8d0b
- Size 113KB
- SHA256 23afc3a97c8732e4b2ef27e4058dbfe267d39e9f02ce05dc999d20c89fad8d0b
- MD5 40718da0467867b2ee532246eef9e85a
- SHA1 a0cab4a7c944d170d35d1e1280e0cd383adde485
- SHA512 2e50f55950fe61154df3e9264a94258935f221e923c231013623f69fc4ce0880cff4afe12cf282363e2fe02b878dea79b957620e29cc68e5f2abafdb45416356
- SSDEEP 1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfagS:hfAIuZAIuYSMjoqtMHfhfagjyZ
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3440) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)