General
- Target 603aa94ba17665f51dacc232f038f416d49481e1d2a79603a1adffdad15c73bb
- Size 1.2MB
- Sample260824-pmlleaxflg
- SHA256 603aa94ba17665f51dacc232f038f416d49481e1d2a79603a1adffdad15c73bb
Score
10/10
Malware Config
Targets
-
- Target 603aa94ba17665f51dacc232f038f416d49481e1d2a79603a1adffdad15c73bb
- Size 1.2MB
- SHA256 603aa94ba17665f51dacc232f038f416d49481e1d2a79603a1adffdad15c73bb
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Family: Cosmu
Cosmu is a Windows worm written in C++.
-
Renames multiple (1844) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.