General
- Target Chara.exe
- Size 657KB
- Sample260825-sqbgdsvana
- SHA256 f0aa1f33b1279f5b19635b0b9e7f5dd4e2b289248c805025e2e485f2aaf80100
- MD5 2fe0834b45803817fb0730601f9aadfd
- SHA1 2f66ad6c71ecbbe42546545a6ab4e6a577a41021
- SHA512 dba480faae2a29673d4121dc0313b303e9eda2cfc80f9db4d8af002e33ff492e93c24952e579744bbb1525bd39e9fc21b60f5c30d714f40ab4320b242d7053c0
- SSDEEP 12288:NErZgly5TTeLI0MPcSCnow5+G2LZwAlWNzs7Ruz04+YJ9fXk4R0TQ6h06OK/h4XP:mbG
- TLSH T1ACE4F531E7B446C8F6585537D264C84B3BF54B26CAE3A5CC748631278B8FD24A9C8BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chara.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chara.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Chara.exe
- Size 657KB
- SHA256 f0aa1f33b1279f5b19635b0b9e7f5dd4e2b289248c805025e2e485f2aaf80100
- MD5 2fe0834b45803817fb0730601f9aadfd
- SHA1 2f66ad6c71ecbbe42546545a6ab4e6a577a41021
- SHA512 dba480faae2a29673d4121dc0313b303e9eda2cfc80f9db4d8af002e33ff492e93c24952e579744bbb1525bd39e9fc21b60f5c30d714f40ab4320b242d7053c0
- SSDEEP 12288:NErZgly5TTeLI0MPcSCnow5+G2LZwAlWNzs7Ruz04+YJ9fXk4R0TQ6h06OK/h4XP:mbG
- TLSH T1ACE4F531E7B446C8F6585537D264C84B3BF54B26CAE3A5CC748631278B8FD24A9C8BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (107) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.