General
-
Target
f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4dN
-
Size
53KB
-
Sample
241016-vh84ssvclj
-
MD5
216b9ed25791f77fcbb36a3be5a598b0
-
SHA1
6aa113924d95fdd05140ecc585c33e6dd7e81d2b
-
SHA256
f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4d
-
SHA512
0957bf5535591e33205f818ebf6b8a80b0f0e1e94d95b63b59d3f40ee5e68b6e01eda879d17a23616162c89d5ed4dff688edd1bc66724cd7e553a23a19575c25
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y96BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9C:CTW7JJ7T9TW7JJ7T/
Behavioral task
behavioral1
Sample
f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4dN.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4dN
-
Size
53KB
-
MD5
216b9ed25791f77fcbb36a3be5a598b0
-
SHA1
6aa113924d95fdd05140ecc585c33e6dd7e81d2b
-
SHA256
f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4d
-
SHA512
0957bf5535591e33205f818ebf6b8a80b0f0e1e94d95b63b59d3f40ee5e68b6e01eda879d17a23616162c89d5ed4dff688edd1bc66724cd7e553a23a19575c25
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y96BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9C:CTW7JJ7T9TW7JJ7T/
Score9/10-
Renames multiple (4600) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-