General
- Target 2026-07-31_78ff50afe9986bf61e39e07486107c01_ezuriloader_qnapcrypt
- Size 9.6MB
- Sample260731-dee8waaj5w
- SHA256 78d055e7d344aa5b12e4ab2a6ea17ef9ce7dd2deffdc29ff16ba8f4188bd3584
- MD5 78ff50afe9986bf61e39e07486107c01
- SHA1 c99f3d0358c43e00f740654cb3bc69c05743884b
- SHA512 42d2537af70b7e010af629e696f46ee7642a4cb120b15b9be62412b073081cd6f08cafaaa2039d5b92aa896261e335f0b8be318c525c4d818d41835dfc7ae525
- SSDEEP 196608:ntQHFiPwvOYWLns/tN+3jeeEeoAYINOim83vYUsjC+rVHtLnFuhl:KHFiIv8Q/f+3poph8gUEnrzhuhl
- TLSH T18CA612077CE558A6C0AA93328AA652A17AB1BC490F3127DB2F51B77C3F327D06D39744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Malware Config
Targets
-
- Target 2026-07-31_78ff50afe9986bf61e39e07486107c01_ezuriloader_qnapcrypt
- Size 9.6MB
- SHA256 78d055e7d344aa5b12e4ab2a6ea17ef9ce7dd2deffdc29ff16ba8f4188bd3584
- MD5 78ff50afe9986bf61e39e07486107c01
- SHA1 c99f3d0358c43e00f740654cb3bc69c05743884b
- SHA512 42d2537af70b7e010af629e696f46ee7642a4cb120b15b9be62412b073081cd6f08cafaaa2039d5b92aa896261e335f0b8be318c525c4d818d41835dfc7ae525
- SSDEEP 196608:ntQHFiPwvOYWLns/tN+3jeeEeoAYINOim83vYUsjC+rVHtLnFuhl:KHFiIv8Q/f+3poph8gUEnrzhuhl
- TLSH T18CA612077CE558A6C0AA93328AA652A17AB1BC490F3127DB2F51B77C3F327D06D39744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Runs EXE from memory
Runs an executable from memory, likely to minimize footprint
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.