Resubmissions
24/08/2024, 06:40
240824-hfkl7szckl724/08/2024, 06:40
240824-hfjpxaxgmd724/08/2024, 06:40
240824-hfjd5szckj724/08/2024, 06:40
240824-hfhgvaxglh724/08/2024, 06:40
240824-hfgwbazcjr724/08/2024, 06:40
240824-hff9sazcjq724/08/2024, 06:40
240824-hffm9axglf724/08/2024, 06:40
240824-hffcgsxgld724/08/2024, 06:40
240824-hfeqyszcjm724/08/2024, 06:40
240824-hfd5esxglb9General
- Target medium.exe
- Size 161.8MB
- Sample240824-hfd5esxglb
- SHA256 335d7d67678ff4475ee0622beef67a923e4962a034ce7ca97d6b08d9c119a3eb
Score
9/10
Malware Config
Targets
-
- Target medium.exe
- Size 161.8MB
- SHA256 335d7d67678ff4475ee0622beef67a923e4962a034ce7ca97d6b08d9c119a3eb
Score9/10-
Renames multiple (52) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled