General
- Target ransom.exe
- Size 137KB
- Sample260623-lv85wsb14w
- SHA256 ecf8787b70b2d3feabb1af6e908b9e26afe743e120bf3c9d921a124ff1427c32
- MD5 ca0d30c7ce8792726aa5443ae4ec3476
- SHA1 695a3142ddbdb68066bf8e0246556af96f8de15c
- SHA512 556c2379edbc6919f63c261fad604248e3bedfa34fa0b4c64bb54f3b8e04e76b17a92ceebeb13f5fd7e7b00b5e0350135a9437568ca34d688d49666942e737d9
- SSDEEP 1536:akELDBNszsH9SOzOjNFEDkL/0noqw0ULnPIyRyrZZOzA11qF5fVY1/xyS1OF:abHXzOjNyDkL0nHKeNPqFbYDtY
- TLSH T1B9D352D0B6D95CC9EA55923C51EAE2322A3CF9E0C5639B07163077321F12ED13DDA62E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ransom.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target ransom.exe
- Size 137KB
- SHA256 ecf8787b70b2d3feabb1af6e908b9e26afe743e120bf3c9d921a124ff1427c32
- MD5 ca0d30c7ce8792726aa5443ae4ec3476
- SHA1 695a3142ddbdb68066bf8e0246556af96f8de15c
- SHA512 556c2379edbc6919f63c261fad604248e3bedfa34fa0b4c64bb54f3b8e04e76b17a92ceebeb13f5fd7e7b00b5e0350135a9437568ca34d688d49666942e737d9
- SSDEEP 1536:akELDBNszsH9SOzOjNFEDkL/0noqw0ULnPIyRyrZZOzA11qF5fVY1/xyS1OF:abHXzOjNyDkL0nHKeNPqFbYDtY
- TLSH T1B9D352D0B6D95CC9EA55923C51EAE2322A3CF9E0C5639B07163077321F12ED13DDA62E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.