Overview

overview

10

Static

static

3

2026-08-19...ar.exe

windows10-2004-x64

10

2026-08-19...ar.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-19_6149930099f1aba1e117568002bf7335_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
  • Size 672KB
  • Sample260820-amc7psy1a1
  • SHA256 0a96fedf3b3739defb5d3bd5df3d681e4a3b63870263ed5c97a013e204545330
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
babukransomware

Malware Config

Targets

    • Target
      2026-08-19_6149930099f1aba1e117568002bf7335_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
    • Size 672KB
    • SHA256 0a96fedf3b3739defb5d3bd5df3d681e4a3b63870263ed5c97a013e204545330
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    babukransomware

    • Family: Babuk Locker

      RaaS first seen in 2021 initially called Vasa Locker.

      ransomwarebabuk

    • Renames multiple (181) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks