General
- Target 2026-07-20_34a152402f0a198627b9bd073d8534ae_qnapcrypt
- Size 2.7MB
- Sample260720-dvkhjadx6j
- SHA256 4438e3e1107d6dd130908ff16e78a0a835f1ba687633a05532eede01e29c550c
- MD5 34a152402f0a198627b9bd073d8534ae
- SHA1 85aa2674a11d9c75b4efad588ed55c87f00d8c66
- SHA512 4dca4b49613cbeb4d354701fd9761fa6363926ef819eb09f6a948134422eb8e80ac32154eee4a274f0bf27ed3360eaa3ff59f011216e7583b4a3c604b6223ede
- SSDEEP 24576:sK6bjmwGJcZNrtaeZXzKze9EGlOlsB8thU3U4dXV9mtHeu0W0fillYLU4VF1M3Gd:sNbVYqXu7ziUs1NjV9
- TLSH T161D51820FA8644F6E40219B524AFA36F23317D144F21E787FB80BF39BD7A7D65522219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-20_34a152402f0a198627b9bd073d8534ae_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_34a152402f0a198627b9bd073d8534ae_qnapcrypt
- Size 2.7MB
- SHA256 4438e3e1107d6dd130908ff16e78a0a835f1ba687633a05532eede01e29c550c
- MD5 34a152402f0a198627b9bd073d8534ae
- SHA1 85aa2674a11d9c75b4efad588ed55c87f00d8c66
- SHA512 4dca4b49613cbeb4d354701fd9761fa6363926ef819eb09f6a948134422eb8e80ac32154eee4a274f0bf27ed3360eaa3ff59f011216e7583b4a3c604b6223ede
- SSDEEP 24576:sK6bjmwGJcZNrtaeZXzKze9EGlOlsB8thU3U4dXV9mtHeu0W0fillYLU4VF1M3Gd:sNbVYqXu7ziUs1NjV9
- TLSH T161D51820FA8644F6E40219B524AFA36F23317D144F21E787FB80BF39BD7A7D65522219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.