General
- Target 241113-3wefca1h8m_pw_infected.zip
- Size 18KB
- Sample241114-axb3dssbkc
- SHA256 5683ca1c57b180b87add6f7b901f29f53e39d012c13085ee0e5f0a50e8b612a0
- MD5 15fc9c0d8a288de14e644290a5352e14
- SHA1 e8033be0702e315803891878f47930074d8d8938
- SHA512 9885583858967f4ee1435a072f7c40468fa8ea6e641343d5a5aa500392236a7d1b762dbc286ed206eb2a3a4a9dcc41f59a45cb11db2cabe9291787db0f655219
- SSDEEP 384:UVsm7FCZXwkv6vP2lNHzjbJFu4veN2eQREZTXrzqdAlArwT/H1u:KT78lTrhnubN4REpXrzHlAUY
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
314c52fc3ef69ee952e54c38157ea7451068a5361deb8782a54d03f59f722f65.exe
Resource
win7-20240903-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
314c52fc3ef69ee952e54c38157ea7451068a5361deb8782a54d03f59f722f65.exe
Resource
win10v2004-20241007-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 314c52fc3ef69ee952e54c38157ea7451068a5361deb8782a54d03f59f722f65
- Size 25KB
- SHA256 314c52fc3ef69ee952e54c38157ea7451068a5361deb8782a54d03f59f722f65
- MD5 0aa91fb2d8f92135050decbfa80c8303
- SHA1 d757c6babb1ed008ec49a7960c2a8d72ec41b115
- SHA512 97f077acaf00e4f6f01b4ce589a9549528756aa0be4bae7d6db72bfbb8f5c5a57823b84cf125befe578a223692a14b0bf97739e4b075fb5907d8acf6de332455
- SSDEEP 384:4rUZuZXd1F89lhp8pEAb2Vw0CswuaAeGbwkKL4cX1PaAjqjtxCvwR:ibHEA70KuaAkZaBJTR
- MD5 SHA1 SHA512 SSDEEP
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (198) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Sets desktop wallpaper using registry