10ea441db8df8516c837383b9e96a6f38e8c9bec3d4608595106862fc7f90791

General

Target
message - 2026-07-31T141840.964.txt
Size 47KB
Sample260731-thrdbabk9t
SHA256 10ea441db8df8516c837383b9e96a6f38e8c9bec3d4608595106862fc7f90791
MD5 5c0a0300dfd34781a298a2237678397f
SHA1 11c2f14f94fadcc91ed18aebb7923c737d67b465
SHA512 cc99b76d13633a87228629f3356a8202251a3a6cb68b5d37c142875a77816d4407dc1152a735ed3671618450df1b8bd55470b7aa6cd8d462959e55b5701af2a2
SSDEEP 768:eVeP4nOf/DCI74qZXSlq+F+h2g+sfEJIiyqib6wW8J4ocG8y3rph72AeR2Kg:eVeP4nO3HpH+F+h2bsfEJIipiGwW8J4K
TLSH
T19E2376A092AF70AE4A41B05BD5047B4ABA6740FE7F2F571638543E7F35F206087AD60E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  message - 2026-07-31T141840.964.txt
- Size 47KB
- SHA256 10ea441db8df8516c837383b9e96a6f38e8c9bec3d4608595106862fc7f90791
- MD5 5c0a0300dfd34781a298a2237678397f
- SHA1 11c2f14f94fadcc91ed18aebb7923c737d67b465
- SHA512 cc99b76d13633a87228629f3356a8202251a3a6cb68b5d37c142875a77816d4407dc1152a735ed3671618450df1b8bd55470b7aa6cd8d462959e55b5701af2a2
- SSDEEP 768:eVeP4nOf/DCI74qZXSlq+F+h2g+sfEJIiyqib6wW8J4ocG8y3rph72AeR2Kg:eVeP4nO3HpH+F+h2bsfEJIipiGwW8J4K
- TLSH
  T19E2376A092AF70AE4A41B05BD5047B4ABA6740FE7F2F571638543E7F35F206087AD60E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

credential_access defense_evasion discovery execution persistence ransomware spyware stealer trojan
- Renames multiple (6135) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Downloads MZ/PE file
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1