General
- Target c7c9eef9989d42fd7af0ce6d04b02284806b7ebc15d96257363a1df689498f5d
- Size 65KB
- Sample240612-eppqqs1ajj
- SHA256 c7c9eef9989d42fd7af0ce6d04b02284806b7ebc15d96257363a1df689498f5d
- MD5 7c675d54f2103b7b84ad0f515c26f3a2
- SHA1 af554e2cc69e075d565890459d7ddae27d056f5a
- SHA512 c3ee2b0aea0fbba65289ac6f28c496b66894fa678096896d15fad8798a561cd7c504cc853296c5311ee0ad7e658c5299b3baba2f1d90c8d5f51a76194fe00dc4
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFaU:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJO+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
c7c9eef9989d42fd7af0ce6d04b02284806b7ebc15d96257363a1df689498f5d.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7c9eef9989d42fd7af0ce6d04b02284806b7ebc15d96257363a1df689498f5d.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target c7c9eef9989d42fd7af0ce6d04b02284806b7ebc15d96257363a1df689498f5d
- Size 65KB
- SHA256 c7c9eef9989d42fd7af0ce6d04b02284806b7ebc15d96257363a1df689498f5d
- MD5 7c675d54f2103b7b84ad0f515c26f3a2
- SHA1 af554e2cc69e075d565890459d7ddae27d056f5a
- SHA512 c3ee2b0aea0fbba65289ac6f28c496b66894fa678096896d15fad8798a561cd7c504cc853296c5311ee0ad7e658c5299b3baba2f1d90c8d5f51a76194fe00dc4
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFaU:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJO+
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3599) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)