General
- Target 0d5c511930eedce88e4b6ec97dc355ddfa72fe0b37c3f3f130bb5205cfdce1df
- Size 12.5MB
- Sample260722-msv1xstbpd
- SHA256 0d5c511930eedce88e4b6ec97dc355ddfa72fe0b37c3f3f130bb5205cfdce1df
Score
10/10
Malware Config
Targets
-
- Target 0d5c511930eedce88e4b6ec97dc355ddfa72fe0b37c3f3f130bb5205cfdce1df
- Size 12.5MB
- SHA256 0d5c511930eedce88e4b6ec97dc355ddfa72fe0b37c3f3f130bb5205cfdce1df
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Family: Cosmu
Cosmu is a Windows worm written in C++.
-
Renames multiple (446) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.