General
- Target финал_ядерка.exe
- Size 4KB
- Sample260625-tr266sds51
- SHA256 7f4ea164a0ae69647de43a70ce57b837b842858b43b33917900725a2f7254e88
- MD5 9053d05febef09996f6d29b3508ca1f1
- SHA1 a541a6065fe3ceff4f389c2ec80719ae0638d190
- SHA512 1574dec0b60a637dadacb7102132ac5a759d3e222530a1a933d3f98db945eafb959bcc8f05faf7908346c13b804ae37e8ecb643e9fd90ce00c3ea8a0b2245a35
- SSDEEP 96:2UpKD4QI8SfdVZ8YE9vFV8kDSZx2VEpweuvLaW:0D4QI1rcPaW
- TLSH T12D91452129058263D6607471E85F2593F7BAF38B2C15FFB079833095AD3B1819A7C6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
финал_ядерка.bat
Resource
win10ltsc2021-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target финал_ядерка.exe
- Size 4KB
- SHA256 7f4ea164a0ae69647de43a70ce57b837b842858b43b33917900725a2f7254e88
- MD5 9053d05febef09996f6d29b3508ca1f1
- SHA1 a541a6065fe3ceff4f389c2ec80719ae0638d190
- SHA512 1574dec0b60a637dadacb7102132ac5a759d3e222530a1a933d3f98db945eafb959bcc8f05faf7908346c13b804ae37e8ecb643e9fd90ce00c3ea8a0b2245a35
- SSDEEP 96:2UpKD4QI8SfdVZ8YE9vFV8kDSZx2VEpweuvLaW:0D4QI1rcPaW
- TLSH T12D91452129058263D6607471E85F2593F7BAF38B2C15FFB079833095AD3B1819A7C6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Disables RegEdit via registry modification
-
Modifies file permissions
-
Drops file in System32 directory