General
- Target d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- Size 1.1MB
- Sample260905-3ydltsvcmf
- SHA256 d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- MD5 42a8588cc82773cd223c42f8fe4be91a
- SHA1 e2ed3cda00140ecd445f5f742729d34f2c452c8c
- SHA512 681e4b155ce1015723469bd819618b292844aa00f7dab447d9557e244792efcef5614f753283efe9dd76ea77b838af78a3e69008c380482a4412b1cea75c535d
- SSDEEP 24576:oV8u1dJPHRQTAVWpiUHeAHLnVUcatjj/KP/2kq/967kI:oNFRbMHLycKTKP/2kW67kI
- TLSH T1A745B002FB8195B1ECC2097816E2EB3F4936AD30572AC5E78BD128668D316E15B3F3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b.exe
Resource
win10v2004-20260513-en
8 signatures
30 seconds
Behavioral task
behavioral2
Sample
d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b.exe
Resource
win11ltsc2024-20260710-en
11 signatures
30 seconds
Malware Config
Targets
-
- Target d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- Size 1.1MB
- SHA256 d4521c34f489f4a6065dea15634df9bb700c84741f476bde1084d9cdfb373a7b
- MD5 42a8588cc82773cd223c42f8fe4be91a
- SHA1 e2ed3cda00140ecd445f5f742729d34f2c452c8c
- SHA512 681e4b155ce1015723469bd819618b292844aa00f7dab447d9557e244792efcef5614f753283efe9dd76ea77b838af78a3e69008c380482a4412b1cea75c535d
- SSDEEP 24576:oV8u1dJPHRQTAVWpiUHeAHLnVUcatjj/KP/2kq/967kI:oNFRbMHLycKTKP/2kW67kI
- TLSH T1A745B002FB8195B1ECC2097816E2EB3F4936AD30572AC5E78BD128668D316E15B3F3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (9209) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.