General
- Target 1d5dd6efc6b06ba7403e8dd2f039373883dc6d2677ab5fdf2063a94ed18724d0
- Size 270KB
- Sample260820-knd6hashqb
- SHA256 1d5dd6efc6b06ba7403e8dd2f039373883dc6d2677ab5fdf2063a94ed18724d0
- MD5 bfeeaae9f58840e8e5073f5d2ed08006
- SHA1 a4c1ac73fbf82d20d7531a6d69cc7fe3ae43fb99
- SHA512 bf32cdc39f49fa3c7462eca4a2683d0a56d9bfeb02cc797361d3de58ba87f3fba76d2423a374a52bb58174bf395ef98c50b083ce30b53629932f3b004e36b58b
- SSDEEP 3072:BdE25hRKNkkSdp/2htmaGGGRMoM8xV61FzH:BdE1NY0bm7GzH
- TLSH T18D4421B8A6A533E2FD0A93397A3F75A4F20F349731069A5503CB9F28AD47D584F28D11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1d5dd6efc6b06ba7403e8dd2f039373883dc6d2677ab5fdf2063a94ed18724d0.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1d5dd6efc6b06ba7403e8dd2f039373883dc6d2677ab5fdf2063a94ed18724d0.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 1d5dd6efc6b06ba7403e8dd2f039373883dc6d2677ab5fdf2063a94ed18724d0
- Size 270KB
- SHA256 1d5dd6efc6b06ba7403e8dd2f039373883dc6d2677ab5fdf2063a94ed18724d0
- MD5 bfeeaae9f58840e8e5073f5d2ed08006
- SHA1 a4c1ac73fbf82d20d7531a6d69cc7fe3ae43fb99
- SHA512 bf32cdc39f49fa3c7462eca4a2683d0a56d9bfeb02cc797361d3de58ba87f3fba76d2423a374a52bb58174bf395ef98c50b083ce30b53629932f3b004e36b58b
- SSDEEP 3072:BdE25hRKNkkSdp/2htmaGGGRMoM8xV61FzH:BdE1NY0bm7GzH
- TLSH T18D4421B8A6A533E2FD0A93397A3F75A4F20F349731069A5503CB9F28AD47D584F28D11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (116) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE