General
- Target ransom.exe
- Size 1.2MB
- Sample260824-pre97axfqg
- SHA256 460addb80c71db7ae6e653b555c5496b2eb3f1314f30e0187c0a359c48f43e2a
- MD5 32648ae99dc2082da7a4de4d9b8bc9cc
- SHA1 26eddc57c45e5ac4d15ba00fe4a7e21bb1c01553
- SHA512 43080c40c3a3a416de15576e4750ff2675b744c221de1df3a008274f45db56f63863abc3be1c10d77cbd6aba160a8da331ed4b25bd0e9a802acb1bef51ad4eda
- SSDEEP 12288:AVK8WI+0Xl3pcL4Xz7RNVvy2KnlTJOzASi2d/PISHb6fSnsDsAJzmRjqw:eQ0XluJ22l9iASi25PUsAJzmRjqw
- TLSH T1A545D74225D70CE9DD926B7811DBE336A735FD608A3A8B2B9184F5323D336C16C6EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ransom.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target ransom.exe
- Size 1.2MB
- SHA256 460addb80c71db7ae6e653b555c5496b2eb3f1314f30e0187c0a359c48f43e2a
- MD5 32648ae99dc2082da7a4de4d9b8bc9cc
- SHA1 26eddc57c45e5ac4d15ba00fe4a7e21bb1c01553
- SHA512 43080c40c3a3a416de15576e4750ff2675b744c221de1df3a008274f45db56f63863abc3be1c10d77cbd6aba160a8da331ed4b25bd0e9a802acb1bef51ad4eda
- SSDEEP 12288:AVK8WI+0Xl3pcL4Xz7RNVvy2KnlTJOzASi2d/PISHb6fSnsDsAJzmRjqw:eQ0XluJ22l9iASi25PUsAJzmRjqw
- TLSH T1A545D74225D70CE9DD926B7811DBE336A735FD608A3A8B2B9184F5323D336C16C6EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables Task Manager via registry modification
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Sets desktop wallpaper using registry