General
-
Target
240907-vd8mgatfqr_pw_infected.zip
-
Size
2.4MB
-
Sample
241001-z5vbda1ckm
-
MD5
19686df02e548da3e143c3873ac823fc
-
SHA1
0fa91a9de24c52d77d8dd47e4f8d80d690217952
-
SHA256
8b41f26e3063ae451f14111c69d28929e0ead8fbe4f11a40257761766553e657
-
SHA512
79c15cb87f036dae15617bdd5452ff00b04639cb6fcc43cba3d6816cefdf8fd0a0fea9e6a0675c7213d25190fc574a5a51dcaed877c2ad611cdfd4e6bf6a8c72
-
SSDEEP
49152:MrLbijd0NP+tF6dDQaG+gleGpBpBgYApYVNUbNQQTatfeTbjwvA1PLs:MrKjuIoenleGp7+cVNaLetm/jwvA1PI
Behavioral task
behavioral1
Sample
240907-vd8mgatfqr_pw_infected.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
240907-vd8mgatfqr_pw_infected.zip
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
240907-vd8mgatfqr_pw_infected.zip
-
Size
2.4MB
-
MD5
19686df02e548da3e143c3873ac823fc
-
SHA1
0fa91a9de24c52d77d8dd47e4f8d80d690217952
-
SHA256
8b41f26e3063ae451f14111c69d28929e0ead8fbe4f11a40257761766553e657
-
SHA512
79c15cb87f036dae15617bdd5452ff00b04639cb6fcc43cba3d6816cefdf8fd0a0fea9e6a0675c7213d25190fc574a5a51dcaed877c2ad611cdfd4e6bf6a8c72
-
SSDEEP
49152:MrLbijd0NP+tF6dDQaG+gleGpBpBgYApYVNUbNQQTatfeTbjwvA1PLs:MrKjuIoenleGp7+cVNaLetm/jwvA1PI
Score10/10-
Detects Windows variants of RansomHub Ransomware
-
Executes dropped EXE
-
Loads dropped DLL
-