General
- Target Chara.exe
- Size 658KB
- Sample260825-sa7vnatfph
- SHA256 a079a744f8735c1451e3b83ac62b142ad17501da1aee6ba91816d9475ac0bcfb
- MD5 4c7c53dac8b046cc086f34c4436b7694
- SHA1 2e5ffc3d397e039538ba8deecf663ad07cdacd77
- SHA512 d146ab2b2e39ff13ebd7486bf6ec92275f17aaaa701d3eb130f5512775282cb4cb83ca7c85b6aceac7cd65e37dc6961af8827b52b4b20af6255289d1e743d27f
- SSDEEP 12288:xoGwEr4+Krccgiy9UbyzaTIZHynvo2w68/P4iF1a4t90sNFiOxVW2Fz+y3IC+nQ:a
- TLSH T170E40631E7B446C8F658553BD264C84B3AF14B27CAE361CC7586712B8B8FD24A9C8BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chara.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chara.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Chara.exe
- Size 658KB
- SHA256 a079a744f8735c1451e3b83ac62b142ad17501da1aee6ba91816d9475ac0bcfb
- MD5 4c7c53dac8b046cc086f34c4436b7694
- SHA1 2e5ffc3d397e039538ba8deecf663ad07cdacd77
- SHA512 d146ab2b2e39ff13ebd7486bf6ec92275f17aaaa701d3eb130f5512775282cb4cb83ca7c85b6aceac7cd65e37dc6961af8827b52b4b20af6255289d1e743d27f
- SSDEEP 12288:xoGwEr4+Krccgiy9UbyzaTIZHynvo2w68/P4iF1a4t90sNFiOxVW2Fz+y3IC+nQ:a
- TLSH T170E40631E7B446C8F658553BD264C84B3AF14B27CAE361CC7586712B8B8FD24A9C8BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (149) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.