General
- Target virus.exe
- Size 30.2MB
- Sample260810-qb76psygrf
- SHA256 0999dbcb6d6cb79f597005ff16c1918025b86d06a36a21c0cb51e864523978dc
- MD5 2b7964eeab4b75843ba0dfeea4c336bc
- SHA1 db5eb062e2db6dae80e9e1dd9a2ae15f6461a2ff
- SHA512 f2d8b62ea95e01d396c7a8568e5e47e6a2170ecb082d93ff6ce4d1c6cee3f9ad64a0d2c3c0513bc3d18c34f2eb14fc419cf35e58b1c5ed0414b930d5df42c7f7
- SSDEEP 786432:wvUMOtzWW8Twt1QtI8QOjTNGCgeNuCuAVsM8ax6NkTnVJM:wvUMOtKWKmiINK4cNPZVy8/M
- TLSH T130673396B692096DD48D533AF2D885276BD275DB0224C1CB6FE40A460F632F5EF39F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
virus.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
virus.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target virus.exe
- Size 30.2MB
- SHA256 0999dbcb6d6cb79f597005ff16c1918025b86d06a36a21c0cb51e864523978dc
- MD5 2b7964eeab4b75843ba0dfeea4c336bc
- SHA1 db5eb062e2db6dae80e9e1dd9a2ae15f6461a2ff
- SHA512 f2d8b62ea95e01d396c7a8568e5e47e6a2170ecb082d93ff6ce4d1c6cee3f9ad64a0d2c3c0513bc3d18c34f2eb14fc419cf35e58b1c5ed0414b930d5df42c7f7
- SSDEEP 786432:wvUMOtzWW8Twt1QtI8QOjTNGCgeNuCuAVsM8ax6NkTnVJM:wvUMOtKWKmiINK4cNPZVy8/M
- TLSH T130673396B692096DD48D533AF2D885276BD275DB0224C1CB6FE40A460F632F5EF39F20
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Loads dropped DLL