0e7ab1904953aca8e89ce357f5bce8e3758aaa5faa546e876a5551ec28dfd2bd.zip
- SHA256 4bcb6d3ce7c749071ea2d3a59066cf49f85417b75918b14e907fde98e32808b8
Behavioral task
behavioral1
Sample
0e7ab1904953aca8e89ce357f5bce8e3758aaa5faa546e876a5551ec28dfd2bd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
0e7ab1904953aca8e89ce357f5bce8e3758aaa5faa546e876a5551ec28dfd2bd.exe
Resource
win11ltsc2024-20260709-en
BQTLock is a cross-platform ransomware that operates under a Ransomware-as-a-Service model.
| resource | yara_rule |
|---|---|
| static1/unpack001/0e7ab1904953aca8e89ce357f5bce8e3758aaa5faa546e876a5551ec28dfd2bd | family_bqtlock |
Detect suspicious telegram bot.
| resource | yara_rule |
|---|---|
| static1/unpack001/0e7ab1904953aca8e89ce357f5bce8e3758aaa5faa546e876a5551ec28dfd2bd | suspicious_telegram_bot |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/0e7ab1904953aca8e89ce357f5bce8e3758aaa5faa546e876a5551ec28dfd2bd |
Detects BQTLock Ransomware
Detect suspicious telegram bot
Detect suspicious telegram bot.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 14, 2026
CN=Software Components Enterprise,1.2.840.113549.1.9.1=#0c1e737570706f727440736f667477617265636f6d706f6e656e74732e636f6d