General
- Target a09602b88bb4fd07db76540afbb526caae0777f6cca460dc75e0e77db8895852
- Size 46KB
- Sample240616-a6ymrascka
- SHA256 a09602b88bb4fd07db76540afbb526caae0777f6cca460dc75e0e77db8895852
- MD5 dc84ba052f63a678288feeb9657e7639
- SHA1 1686e93eda6ee12dc4a0be697a331617549cde09
- SHA512 dec83b6438477f87f21102e3657f34eb9b4dd7cce491368f133c329f06d911ba697e0618a49a164653ae26403016c3df2066faf658498d6b4c4448e44541b624
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFWk:CTWn1++PJHJXA/OsIZfzc3/Q8J
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
a09602b88bb4fd07db76540afbb526caae0777f6cca460dc75e0e77db8895852.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a09602b88bb4fd07db76540afbb526caae0777f6cca460dc75e0e77db8895852.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target a09602b88bb4fd07db76540afbb526caae0777f6cca460dc75e0e77db8895852
- Size 46KB
- SHA256 a09602b88bb4fd07db76540afbb526caae0777f6cca460dc75e0e77db8895852
- MD5 dc84ba052f63a678288feeb9657e7639
- SHA1 1686e93eda6ee12dc4a0be697a331617549cde09
- SHA512 dec83b6438477f87f21102e3657f34eb9b4dd7cce491368f133c329f06d911ba697e0618a49a164653ae26403016c3df2066faf658498d6b4c4448e44541b624
- SSDEEP 768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFWk:CTWn1++PJHJXA/OsIZfzc3/Q8J
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3434) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)