General
- Target a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645
- Size 42KB
- Sample240612-cjdeeaydln
- SHA256 a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645
- MD5 733cc619acd14d432e5fd92436e1e8c3
- SHA1 e166eb659f914a8aba728a982a81c08109614ea8
- SHA512 2273f3d503eb50c6dc8ddca5becc11d7dc6e63eddc04d3501a334dd1af4a0aabf4ce57361dd98dbe9a773283b6dfeffbfeaca01898c483891c6f242081a81cd5
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFK:CTWn1++PJHJXA/OsIZfzc3/Q8K
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645.exe
Resource
win7-20240215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645.exe
Resource
win10v2004-20240611-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645
- Size 42KB
- SHA256 a506399e6a1e4dec51ff9014517d01fcf1065137b6af1d81f9d9f192bb5b3645
- MD5 733cc619acd14d432e5fd92436e1e8c3
- SHA1 e166eb659f914a8aba728a982a81c08109614ea8
- SHA512 2273f3d503eb50c6dc8ddca5becc11d7dc6e63eddc04d3501a334dd1af4a0aabf4ce57361dd98dbe9a773283b6dfeffbfeaca01898c483891c6f242081a81cd5
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFK:CTWn1++PJHJXA/OsIZfzc3/Q8K
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3782) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)