General
- Target Chara.exe
- Size 811KB
- Sample260825-r6f65stepd
- SHA256 e977d9019638f1d22d1dacf3d452191626a89b767bb5bf3fe59a2fb1fec8fb73
- MD5 3da4bea33b46c428f943fd284a678549
- SHA1 8479c6a27c13fad56f93eb5cde7cb95e013ce94f
- SHA512 737d08e6d11532d7c5b9594a4b54f64d569ab6b434aeec91bf7b6fee8dc4135d1b5f1bf42a354c840ebf0cebb4cf7fa1e7abd001d74853411b72abb62800877d
- SSDEEP 3072:z0lY8Q5gvsczGcP5wIA1s7rgqGBobXexJi1S878FweHu/bFMpl9zb8YS16DcY9eq:Ix8rqGBoDsJi1S878FJuk9z06sdOQFi
- TLSH T17E0539A0F72DB0B2FA740A3E22C3CC9F7AD0651A5DE6356474499A3F9B7218059CD3E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chara.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chara.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Chara.exe
- Size 811KB
- SHA256 e977d9019638f1d22d1dacf3d452191626a89b767bb5bf3fe59a2fb1fec8fb73
- MD5 3da4bea33b46c428f943fd284a678549
- SHA1 8479c6a27c13fad56f93eb5cde7cb95e013ce94f
- SHA512 737d08e6d11532d7c5b9594a4b54f64d569ab6b434aeec91bf7b6fee8dc4135d1b5f1bf42a354c840ebf0cebb4cf7fa1e7abd001d74853411b72abb62800877d
- SSDEEP 3072:z0lY8Q5gvsczGcP5wIA1s7rgqGBobXexJi1S878FweHu/bFMpl9zb8YS16DcY9eq:Ix8rqGBoDsJi1S878FJuk9z06sdOQFi
- TLSH T17E0539A0F72DB0B2FA740A3E22C3CC9F7AD0651A5DE6356474499A3F9B7218059CD3E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (110) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.