General
- Target 0ee1081c8db180fd2a44c56448289f8ca123de0de49f71eea90848da46d1595f
- Size 12.5MB
- Sample260722-mk49maztcv
- SHA256 0ee1081c8db180fd2a44c56448289f8ca123de0de49f71eea90848da46d1595f
Score
10/10
Malware Config
Targets
-
- Target 0ee1081c8db180fd2a44c56448289f8ca123de0de49f71eea90848da46d1595f
- Size 12.5MB
- SHA256 0ee1081c8db180fd2a44c56448289f8ca123de0de49f71eea90848da46d1595f
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Family: Cosmu
Cosmu is a Windows worm written in C++.
-
Renames multiple (223) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.