General
- Target RenameTest.ps1
- Size 1KB
- Sample260825-j7ncvafq2t
- SHA256 ace1e7b9d2527f92e0e29fa66f83555de367c7900fe4715d8430f52cd140b9ce
- MD5 5d05868187720d00e7ad0562b604de1d
- SHA1 9456f54e04d8e59aa48d7bb096d526110bed4fb7
- SHA512 c7e72f2ccde406ab398884a96a0d7dffca90f4eb1c5ab2e670e0fcd5c19cb1a58134f62000ced8d70596543f6c20ae5c9ec200317eac1e9da0735e9eb2681798
- TLSH T18821E08A332CD5F204E353A1C5966064BC1CC07F81869F02F45C47E3DF6056F5AA6775
- MD5 SHA1 SHA512 TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
RenameTest.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
RenameTest.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target RenameTest.ps1
- Size 1KB
- SHA256 ace1e7b9d2527f92e0e29fa66f83555de367c7900fe4715d8430f52cd140b9ce
- MD5 5d05868187720d00e7ad0562b604de1d
- SHA1 9456f54e04d8e59aa48d7bb096d526110bed4fb7
- SHA512 c7e72f2ccde406ab398884a96a0d7dffca90f4eb1c5ab2e670e0fcd5c19cb1a58134f62000ced8d70596543f6c20ae5c9ec200317eac1e9da0735e9eb2681798
- TLSH T18821E08A332CD5F204E353A1C5966064BC1CC07F81869F02F45C47E3DF6056F5AA6775
- MD5 SHA1 SHA512 TLSH
Score9/10-
Renames multiple (101) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.