General
- Target dfe11c22eb716a42af17f6c6abc4658d1b540518983351880bce59f8f6df3eb4
- Size 100KB
- Sample260806-kkkh4sxclb
- SHA256 dfe11c22eb716a42af17f6c6abc4658d1b540518983351880bce59f8f6df3eb4
Score
10/10
Malware Config
Targets
-
- Target dfe11c22eb716a42af17f6c6abc4658d1b540518983351880bce59f8f6df3eb4
- Size 100KB
- SHA256 dfe11c22eb716a42af17f6c6abc4658d1b540518983351880bce59f8f6df3eb4
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Family: Cosmu
Cosmu is a Windows worm written in C++.
-
Renames multiple (4879) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.