General
- Target d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- Size 1.1MB
- Sample260905-3ydltsvcmf
- SHA256 d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- MD5 42a8588cc82773cd223c42f8fe4be91a
- SHA1 e2ed3cda00140ecd445f5f742729d34f2c452c8c
- SHA512 681e4b155ce1015723469bd819618b292844aa00f7dab447d9557e244792efcef5614f753283efe9dd76ea77b838af78a3e69008c380482a4412b1cea75c535d
- SSDEEP 24576:oV8u1dJPHRQTAVWpiUHeAHLnVUcatjj/KP/2kq/967kI:oNFRbMHLycKTKP/2kW67kI
- TLSH T1A745B002FB8195B1ECC2097816E2EB3F4936AD30572AC5E78BD128668D316E15B3F3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b.exe
Resource
win10v2004-20260513-en
8 signatures
30 seconds
Behavioral task
behavioral2
Sample
d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b.exe
Resource
win11ltsc2024-20260710-en
11 signatures
30 seconds
Malware Config
Targets
-
- Target d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- Size 1.1MB
- SHA256 d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- MD5 42a8588cc82773cd223c42f8fe4be91a
- SHA1 e2ed3cda00140ecd445f5f742729d34f2c452c8c
- SHA512 681e4b155ce1015723469bd819618b292844aa00f7dab447d9557e244792efcef5614f753283efe9dd76ea77b838af78a3e69008c380482a4412b1cea75c535d
- SSDEEP 24576:oV8u1dJPHRQTAVWpiUHeAHLnVUcatjj/KP/2kq/967kI:oNFRbMHLycKTKP/2kW67kI
- TLSH T1A745B002FB8195B1ECC2097816E2EB3F4936AD30572AC5E78BD128668D316E15B3F3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Renames multiple (9209) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.