Overview

overview

10

Static

static

3

4e58629158...69.exe

windows7-x64

10

4e58629158...69.exe

windows10-2004-x64

1

Resubmissions

10/10/2025, 03:46

251010-ebn72ser2z10

06/07/2024, 07:41

240706-jjfcbstcph10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe
  • Size 1.4MB
  • Sample240706-jjfcbstcph
  • SHA256 4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ransomwarespywarestealer

Malware Config

Targets

    • Target
      4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe
    • Size 1.4MB
    • SHA256 4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    ransomwarespywarestealer

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Renames multiple (8596) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks