General
- Target setup.exe
- Size 552KB
- Sample261102-w2mwcaew3q
- SHA256 b480e706cf532c5dd00354ba0feac70ad1d784dddffc14d6dbc636bf94a0a423
- MD5 290bbded2487f875a79ead3f66525fcb
- SHA1 bd536107c1a5e0d3176277f9aa92942f5246c7f7
- SHA512 e6b47a53779769c51f6b58a560c102f84a2b142021265002ca8aac451fc5e711faf61eaff058712ee1988606e4d064c9b85efdac54e9293a93356b77dfd77c6d
- SSDEEP 12288:guGj5je69oqAmj5oMqKyKAuqOAP0wuBeMb01JQntLOCHno0HC:gXhe29AmjkKuuBemHnxi
- TLSH T12BC4171366ECBCB5E17216706B7797E0DB7EFC211D30CA1E22C0151D997C982BA21BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 552KB
- SHA256 b480e706cf532c5dd00354ba0feac70ad1d784dddffc14d6dbc636bf94a0a423
- MD5 290bbded2487f875a79ead3f66525fcb
- SHA1 bd536107c1a5e0d3176277f9aa92942f5246c7f7
- SHA512 e6b47a53779769c51f6b58a560c102f84a2b142021265002ca8aac451fc5e711faf61eaff058712ee1988606e4d064c9b85efdac54e9293a93356b77dfd77c6d
- SSDEEP 12288:guGj5je69oqAmj5oMqKyKAuqOAP0wuBeMb01JQntLOCHno0HC:gXhe29AmjkKuuBemHnxi
- TLSH T12BC4171366ECBCB5E17216706B7797E0DB7EFC211D30CA1E22C0151D997C982BA21BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Renames multiple (596) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Downloads MZ/PE file