General
- Target FadeSEC.exe
- Size 350KB
- Sample260720-q4t5jsb15p
- SHA256 bdb8a2b5ffc4025cd16b91854a1b78cc714e1750e1b51bf024d7ee44ec2d0a25
- MD5 fadf6eec4a2abd999605282526a5cee1
- SHA1 3040c951fc4ef8ff2ec7c0704b3ad8d8f6a64fc0
- SHA512 b71f86bd73a7c86b5df68aa730aa0364d991b3a001f6f36fdcb06e3fd3264a987fcb3c0bb2a5ec11ca35f7f972055ac15f5319fb684ce0cbfdfe02cee8096804
- SSDEEP 6144:eqVaJI7RZKnhz6hwF3ZhBasFr72CbmVw/mYnk7S:vR8sSXhxFr7Lm2/mYn
- TLSH T184748D16F7A514F9E1A7C178CD524906DBB27C4A07A1ABCF23A04A961F237E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FadeSEC.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FadeSEC.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target FadeSEC.exe
- Size 350KB
- SHA256 bdb8a2b5ffc4025cd16b91854a1b78cc714e1750e1b51bf024d7ee44ec2d0a25
- MD5 fadf6eec4a2abd999605282526a5cee1
- SHA1 3040c951fc4ef8ff2ec7c0704b3ad8d8f6a64fc0
- SHA512 b71f86bd73a7c86b5df68aa730aa0364d991b3a001f6f36fdcb06e3fd3264a987fcb3c0bb2a5ec11ca35f7f972055ac15f5319fb684ce0cbfdfe02cee8096804
- SSDEEP 6144:eqVaJI7RZKnhz6hwF3ZhBasFr72CbmVw/mYnk7S:vR8sSXhxFr7Lm2/mYn
- TLSH T184748D16F7A514F9E1A7C178CD524906DBB27C4A07A1ABCF23A04A961F237E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (659) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s)