General
- Target Chara.exe
- Size 658KB
- Sample260825-rs7f6stcqe
- SHA256 e47c347a4d3ab5c5dd7b9acdb1156698f8ee26fcc77fab25a163bc17a05a318e
- MD5 11a5e95003b2fa9a60173bee9b5857fc
- SHA1 694e16fe6e16e41ce0da48280a9b397cc9c8a8ec
- SHA512 74ad550e37f43089f1a5ec88029656af6c4b44db428adf3f350f2360bd0665732c60ce5c9c691650c16e6deffc9901cba4480718615d54155cde3dace51a902f
- SSDEEP 12288:UJGwEr4+Krccgiy9UbyzaTIZHynvo2w68/P4iF1a4t90sNFiOxVW2Fz+y3IC+nQP:h
- TLSH T162E40631E7B446C8F658553BD264C84B3AF14B27CAE361CC7586712B8B8FD24A9C8BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chara.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chara.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Chara.exe
- Size 658KB
- SHA256 e47c347a4d3ab5c5dd7b9acdb1156698f8ee26fcc77fab25a163bc17a05a318e
- MD5 11a5e95003b2fa9a60173bee9b5857fc
- SHA1 694e16fe6e16e41ce0da48280a9b397cc9c8a8ec
- SHA512 74ad550e37f43089f1a5ec88029656af6c4b44db428adf3f350f2360bd0665732c60ce5c9c691650c16e6deffc9901cba4480718615d54155cde3dace51a902f
- SSDEEP 12288:UJGwEr4+Krccgiy9UbyzaTIZHynvo2w68/P4iF1a4t90sNFiOxVW2Fz+y3IC+nQP:h
- TLSH T162E40631E7B446C8F658553BD264C84B3AF14B27CAE361CC7586712B8B8FD24A9C8BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (98) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.