General
- Target cats.exe
- Size 126KB
- Sample240719-srpqea1dkd
- SHA256 61cd0131cb4bf090c5ee7761566f6f7a778e78b37d220f0506f98632a2663ee8
- MD5 e0d108435c58dc9403588e4dcab68275
- SHA1 7a7331423938020550ff3decd2e8b50b3ee5c87a
- SHA512 2a5648ced91b75d928b4d71a8580c5bee75a5f27623f8c5071cd23b8cd85eaa8129ddb0aaf0a1fcca05fb1b7868a0fcd9306e9ddf2d3eaaf605c41cc7fde4a9e
- SSDEEP 3072:7+gYdgLNp0jPilel4+800N1lknzRxqmhda40U6hrnzRxqmhda40U6hK:6gvunnhdaLlrnnhdaLl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cats.exe
Resource
win7-20240704-en
9 signatures
1800 seconds
Malware Config
Targets
-
- Target cats.exe
- Size 126KB
- SHA256 61cd0131cb4bf090c5ee7761566f6f7a778e78b37d220f0506f98632a2663ee8
- MD5 e0d108435c58dc9403588e4dcab68275
- SHA1 7a7331423938020550ff3decd2e8b50b3ee5c87a
- SHA512 2a5648ced91b75d928b4d71a8580c5bee75a5f27623f8c5071cd23b8cd85eaa8129ddb0aaf0a1fcca05fb1b7868a0fcd9306e9ddf2d3eaaf605c41cc7fde4a9e
- SSDEEP 3072:7+gYdgLNp0jPilel4+800N1lknzRxqmhda40U6hrnzRxqmhda40U6hK:6gvunnhdaLlrnnhdaLl
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Jigsaw Ransomware
Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.
-
Renames multiple (2027) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Adds Run key to start application