General
- Target Chara.exe
- Size 2.9MB
- Sample260827-scgq9aaa58
- SHA256 35c5a7e33d914ba133450bea8c077f683889e99d5326f9ab4d045d3367431bd4
- MD5 29714d1f654ccd01bdab9082cbaa5512
- SHA1 60b0f6771bfbb6db460e97056fad61684dd68ee9
- SHA512 7af00543a51cf55bea53c0a0e0b13fda1f50eb609987237b87eb0a642304efe3dda8588810d375819c49dcd7b86a91d4b7e80c482c16750a273cfbe3b43189ea
- SSDEEP 1536:70lY8QpaMvgbqGqepD2CtluqlhT7zHI5nKpa:70lY8QpaigGGHxXlo
- TLSH T185E5BA38F2250878E19FF4798842BC0E769D79D3D7D285A027BC19544FE9FEE9C82681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chara.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chara.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Chara.exe
- Size 2.9MB
- SHA256 35c5a7e33d914ba133450bea8c077f683889e99d5326f9ab4d045d3367431bd4
- MD5 29714d1f654ccd01bdab9082cbaa5512
- SHA1 60b0f6771bfbb6db460e97056fad61684dd68ee9
- SHA512 7af00543a51cf55bea53c0a0e0b13fda1f50eb609987237b87eb0a642304efe3dda8588810d375819c49dcd7b86a91d4b7e80c482c16750a273cfbe3b43189ea
- SSDEEP 1536:70lY8QpaMvgbqGqepD2CtluqlhT7zHI5nKpa:70lY8QpaigGGHxXlo
- TLSH T185E5BA38F2250878E19FF4798842BC0E769D79D3D7D285A027BC19544FE9FEE9C82681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (112) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.