General
- Target 20e778ae78ba7283487c984a4756d0e6c809338b2e4121135b55c5adbd08fe45N
- Size 39KB
- Sample241006-nrtbda1hpm
- SHA256 20e778ae78ba7283487c984a4756d0e6c809338b2e4121135b55c5adbd08fe45
- MD5 0605c1f13bee020cac97f4c127c0bcb0
- SHA1 4ca6a34b7ee07d2fe0cab4091265f33662a2e65c
- SHA512 e570d7ddeb7e7e4090692cd2fb0eb3c47e3b0b26fd72df50b87a0ce664129627b4256181130c8a9a8f953d5807b80a6a27089feb51b5f0c8d77e9918f21edebc
- SSDEEP 192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJH6vBSSvBSYVCu:yBs7Br5xjL8AgA71Fbhvx/5l
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
20e778ae78ba7283487c984a4756d0e6c809338b2e4121135b55c5adbd08fe45N.exe
Resource
win7-20240903-en
3 signatures
120 seconds
Behavioral task
behavioral2
Sample
20e778ae78ba7283487c984a4756d0e6c809338b2e4121135b55c5adbd08fe45N.exe
Resource
win10v2004-20240802-en
3 signatures
120 seconds
Malware Config
Targets
-
- Target 20e778ae78ba7283487c984a4756d0e6c809338b2e4121135b55c5adbd08fe45N
- Size 39KB
- SHA256 20e778ae78ba7283487c984a4756d0e6c809338b2e4121135b55c5adbd08fe45
- MD5 0605c1f13bee020cac97f4c127c0bcb0
- SHA1 4ca6a34b7ee07d2fe0cab4091265f33662a2e65c
- SHA512 e570d7ddeb7e7e4090692cd2fb0eb3c47e3b0b26fd72df50b87a0ce664129627b4256181130c8a9a8f953d5807b80a6a27089feb51b5f0c8d77e9918f21edebc
- SSDEEP 192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJH6vBSSvBSYVCu:yBs7Br5xjL8AgA71Fbhvx/5l
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3382) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.