General

  • Target
    desktop.ini.tmp
  • Size 6.1MB
  • Sample261014-javews1vb1
  • SHA256 7cab3b0225d9d5995de4bd4697d5a84f349b0481ca019ef0c369885d0bb892aa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      desktop.ini.tmp
    • Size 6.1MB
    • SHA256 7cab3b0225d9d5995de4bd4697d5a84f349b0481ca019ef0c369885d0bb892aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Cosmu payload

      Cosmu is a worm written in C++.

    • Family: Cosmu

      Cosmu is a Windows worm written in C++.

    • Renames multiple (220) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

MITRE ATT&CK Enterprise v16

Tasks