e1204ec1497f8158605e8b2cb5191181608514a339569c724aa5e8ae09f47ac7

General

Target
message - 2026-07-29T000428.836.txt
Size 5KB
Sample260729-ldzvwsfd94
SHA256 e1204ec1497f8158605e8b2cb5191181608514a339569c724aa5e8ae09f47ac7
MD5 70368d793345b8188ff4699dbafb3d4b
SHA1 b702d318a8a9e07f5de630f307151f4e5ff98497
SHA512 91015cbceea1e5e44c4480abd554632dd16108de5c5030983f4a16f60fefda2d0ccbe6d9391cfa1ada65d3a9f0040ea67082d5a9a8a440fc7e6a5b1af9a86571
SSDEEP 96:j0FCmNVEG7a/LNxdeHa2VuVdjLJHl4NxU4ObNwVbm7TDhCbUf9Z4KKsK5GYBs:EC7zNax0Fo6Nomn4KXi6
TLSH
T1ACB1DE609AAD35ED0240B557C80C7B4ABCE664FFBFBF670608A41DBE38F2034C659516
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  message - 2026-07-29T000428.836.txt
- Size 5KB
- SHA256 e1204ec1497f8158605e8b2cb5191181608514a339569c724aa5e8ae09f47ac7
- MD5 70368d793345b8188ff4699dbafb3d4b
- SHA1 b702d318a8a9e07f5de630f307151f4e5ff98497
- SHA512 91015cbceea1e5e44c4480abd554632dd16108de5c5030983f4a16f60fefda2d0ccbe6d9391cfa1ada65d3a9f0040ea67082d5a9a8a440fc7e6a5b1af9a86571
- SSDEEP 96:j0FCmNVEG7a/LNxdeHa2VuVdjLJHl4NxU4ObNwVbm7TDhCbUf9Z4KKsK5GYBs:EC7zNax0Fo6Nomn4KXi6
- TLSH
  T1ACB1DE609AAD35ED0240B557C80C7B4ABCE664FFBFBF670608A41DBE38F2034C659516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

credential_access defense_evasion discovery execution persistence ransomware spyware stealer trojan
- Renames multiple (6135) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Downloads MZ/PE file
- Uses browser remote debugging
  Can be used control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1