General
- Target d6c7d5816513d86ea8fcb5cdb790029856a1f9575bcd454673632931035f09fe
- Size 47KB
- Sample260722-ve5bfav1fx
- SHA256 d6c7d5816513d86ea8fcb5cdb790029856a1f9575bcd454673632931035f09fe
Score
10/10
Malware Config
Targets
-
- Target d6c7d5816513d86ea8fcb5cdb790029856a1f9575bcd454673632931035f09fe
- Size 47KB
- SHA256 d6c7d5816513d86ea8fcb5cdb790029856a1f9575bcd454673632931035f09fe
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Family: Cosmu
Cosmu is a Windows worm written in C++.
-
Renames multiple (4874) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.