General
-
Target
d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7
-
Size
156KB
-
Sample
250519-ns76xsxmz8
-
MD5
de7c4c7d41ce269e9f620ee871feb5e6
-
SHA1
34e5e9cc8e0527133f3f5dfdeb3933424b5c30a7
-
SHA256
d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7
-
SHA512
101a6099d8cddd55e7c51ff933f9f1faa6ae791261b9ed886ae6d83212652b6ed54733cb4dc2ed050103cde0e512c7e93084f99099b4bcbccb56a6d25549e10a
-
SSDEEP
3072:gWTSIoXkZA/gwjHnrhtVufJO05m4uvHwog8yT5Fo9:gWTSIoXNHnr1GJOl4uvjgddFm
Static task
static1
Behavioral task
behavioral1
Sample
d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7.exe
Resource
win10v2004-20250502-en
Behavioral task
behavioral2
Sample
d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7.exe
Resource
win11-20250502-en
Malware Config
Targets
-
-
Target
d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7
-
Size
156KB
-
MD5
de7c4c7d41ce269e9f620ee871feb5e6
-
SHA1
34e5e9cc8e0527133f3f5dfdeb3933424b5c30a7
-
SHA256
d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7
-
SHA512
101a6099d8cddd55e7c51ff933f9f1faa6ae791261b9ed886ae6d83212652b6ed54733cb4dc2ed050103cde0e512c7e93084f99099b4bcbccb56a6d25549e10a
-
SSDEEP
3072:gWTSIoXkZA/gwjHnrhtVufJO05m4uvHwog8yT5Fo9:gWTSIoXNHnr1GJOl4uvjgddFm
Score9/10-
Renames multiple (5282) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Drops file in System32 directory
-