General
- Target FadeSEC.exe
- Size 350KB
- Sample260720-q6vtvsb19l
- SHA256 da888971eb792d530d67771b0adaf0f677ddde3be545e71704e7f1888e5b7c3b
- MD5 76c1df65a1e08810d5502cacfcb62b3b
- SHA1 f0a6bffca0056750ea2c80423fdec82fecf39356
- SHA512 d41e28344b3cf751993b54cffe56a752aeb6174497905e31b0f9986f52a714ec6bc57be89cf91630b614e97906fc90b77df243c54082a8a0b457ec243390f957
- SSDEEP 6144:6yVmMlZs0UNp2UhQsA6XAuPWnhzSyLm4SecEvdJevp:6yydNhXCnhz3mtecMyx
- TLSH T1BB748E59F7A414F9E1A7D178CD534902DB727C4A07A1ABCF23A04A961F23BE05E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FadeSEC.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
FadeSEC.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target FadeSEC.exe
- Size 350KB
- SHA256 da888971eb792d530d67771b0adaf0f677ddde3be545e71704e7f1888e5b7c3b
- MD5 76c1df65a1e08810d5502cacfcb62b3b
- SHA1 f0a6bffca0056750ea2c80423fdec82fecf39356
- SHA512 d41e28344b3cf751993b54cffe56a752aeb6174497905e31b0f9986f52a714ec6bc57be89cf91630b614e97906fc90b77df243c54082a8a0b457ec243390f957
- SSDEEP 6144:6yVmMlZs0UNp2UhQsA6XAuPWnhzSyLm4SecEvdJevp:6yydNhXCnhz3mtecMyx
- TLSH T1BB748E59F7A414F9E1A7D178CD534902DB727C4A07A1ABCF23A04A961F23BE05E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (641) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s)