General
- Target slam.ransomware.builder.installer.exe
- Size 4.6MB
- Sample261104-ca533a1z7p
- SHA256 534f55bc067f21e2e14034d4278694aacd420d1d19e94f88d318ec3860fd6690
- MD5 8b7d969472f6fb21ab16d5c924694a5a
- SHA1 96340005d852261fae668e25a913e6fb9dbf5ab0
- SHA512 3eb327d9f838121887428becbccf7ced8d93959d8d2cdc1416e3bd6edf731449ac3a9c7fcf3eaae33787074161b7a9660ef2452621cc9c2e6300be6328ae4d32
- SSDEEP 98304:0B5ZetD8Q/yMB5ZetD8Q/T+K7U6ScMw8/KMl3xVDTxDns9v848H:0/ZgrZ/ZgrbM6FMwGKu3XDKT
- TLSH T16C263359C8F42374C16DAB71D8D27520636F7D52C132E87B2BAD4BC609977302F82A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
slam.ransomware.builder.installer.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target slam.ransomware.builder.installer.exe
- Size 4.6MB
- SHA256 534f55bc067f21e2e14034d4278694aacd420d1d19e94f88d318ec3860fd6690
- MD5 8b7d969472f6fb21ab16d5c924694a5a
- SHA1 96340005d852261fae668e25a913e6fb9dbf5ab0
- SHA512 3eb327d9f838121887428becbccf7ced8d93959d8d2cdc1416e3bd6edf731449ac3a9c7fcf3eaae33787074161b7a9660ef2452621cc9c2e6300be6328ae4d32
- SSDEEP 98304:0B5ZetD8Q/yMB5ZetD8Q/T+K7U6ScMw8/KMl3xVDTxDns9v848H:0/ZgrZ/ZgrbM6FMwGKu3XDKT
- TLSH T16C263359C8F42374C16DAB71D8D27520636F7D52C132E87B2BAD4BC609977302F82A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects SLAM Ransomware
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE