General
- Target a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29.zip
- Size 2.2MB
- Sample261015-xpdycabw7t
- SHA256 ea171e6945ae78572ad89aba509cc397478df618e63e3aaccac730b2c58c01c0
- MD5 804a68150f3e2cb6f624f0bbf73afe6e
- SHA1 ec127dc2136cac144e6cab4321ff63242c264e3f
- SHA512 3f2f45945cfd77a9208ffd0843e15e422d6f9226554cb00fb651ffad4cfa44d7bf63f9b5b5173c533200d0c0333bc32e9e7d89cdc129930ce3da227c4b6fea49
- SSDEEP 49152:NzEJ3tj/81BHNQoVTktI8g3O31Wpj4H4YyabucGD436y5VQVc:KJ81BtTw8pj4YaufE7Kc
- TLSH T1E2B533A4CF32501D5A7A54F1054D9B072E74F0BC84A73C4EA7D6A8BA2C862F831FB795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29.exe
Resource
win10ltsc2021-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29.exe
- Size 5.5MB
- SHA256 a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29
- MD5 9e35477130cd2731755a35e8b4c0429b
- SHA1 28811b212449cd4b23042770b437b98acb3f9c47
- SHA512 cc1d894c58e9209c0d9569ea8f4a1b0a2519df1cef6703fe2648ecafa2586be194f52c3c1a037b9d34df90b8d95d06279aa0d995b2f8a19d60c641cc75060c46
- SSDEEP 49152:dXMpGtlqibVwASODzFOgNju/+cw3Qsh3mlZm9FHnuswfB479lx14Q6od8oWK6KyM:Ol2cJyznus1R1RBEAEz2/W+fZ
- TLSH T1DA468D6BA57C01D9F46A81F8D2835623D7727615A7B237EB19104EFB1F23AD01EBA310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (2096) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.