General
-
Target
7c39efe28127e688d477f2a39a557ec0N.exe
-
Size
103KB
-
Sample
240806-jpnkwsxelf
-
MD5
7c39efe28127e688d477f2a39a557ec0
-
SHA1
ebc0a0e081f6d8692c55f3e242ae999828ba5d01
-
SHA256
21e693ba66e4d140831cd44d8e9890b4b40e2c4839be8a9ed755326d311408e1
-
SHA512
4b09c3d5b2a27e75658e6c139859ef20483c0969d4658e3649c137cc119d2a81e96a803f77dbf952cf7bf5963777fe00e6120aa3c1f9b5f4ef943c922a46e51a
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyl2Sm0mJ7Zf/FAxTWoJJZENTNyl2Sm0mR:fny1tE42Fny1tE42f
Behavioral task
behavioral1
Sample
7c39efe28127e688d477f2a39a557ec0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7c39efe28127e688d477f2a39a557ec0N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
7c39efe28127e688d477f2a39a557ec0N.exe
-
Size
103KB
-
MD5
7c39efe28127e688d477f2a39a557ec0
-
SHA1
ebc0a0e081f6d8692c55f3e242ae999828ba5d01
-
SHA256
21e693ba66e4d140831cd44d8e9890b4b40e2c4839be8a9ed755326d311408e1
-
SHA512
4b09c3d5b2a27e75658e6c139859ef20483c0969d4658e3649c137cc119d2a81e96a803f77dbf952cf7bf5963777fe00e6120aa3c1f9b5f4ef943c922a46e51a
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyl2Sm0mJ7Zf/FAxTWoJJZENTNyl2Sm0mR:fny1tE42Fny1tE42f
Score9/10-
Renames multiple (336) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-