SF.exe
Windows Exe (x86-32)
Created at 2019-05-02T23:13:00
VMRay Threat Indicators (6 rules, 6 matches)
| Severity | Category | Operation | Count | Classification | |
|---|---|---|---|---|---|
|
5/5
|
Local AV | Malicious content was detected by heuristic scan | 1 | - | |
|
|||||
|
4/5
|
File System | Modifies content of user files | 1 | Ransomware | |
|
|||||
|
4/5
|
File System | Renames user files | 1 | Ransomware | |
|
|||||
|
2/5
|
Information Stealing | Reads sensitive browser data | 1 | - | |
|
|||||
|
1/5
|
File System | Creates an unusually large number of files | 1 | - | |
|
|||||
|
1/5
|
Static | Unparsable sections in file | 1 | - | |
|
|||||
Screenshots
Monitored Processes
Sample Information
| ID | #636500 |
| MD5 |
0aac79451e563017098fca21d2ab7e86
|
| SHA1 |
5a015fd09d38fa18599a93799607d89292ac7742
|
| SHA256 |
6e25ff16fa0416e2e4b6e124235c10da4a0a861e3e255705ad0072a7a1da83d1
|
| SSDeep |
3072:TtYhbfx/43E1GPEygKJwMErqQrZb+6sWj43EQ:TehbZI1g7MsZCq
|
| ImpHash |
f34d5f2d4577ed6d9ceec516c1f5a744
|
| Filename | SF.exe |
| File Size | 270.50 KB |
| Sample Type | Windows Exe (x86-32) |
Analysis Information
| Creation Time | 2019-05-03 01:13 (UTC+2) |
| Analysis Duration | 00:05:53 |
| Number of Monitored Processes | 1 |
| Execution Successful |
|
| Reputation Enabled |
|
| WHOIS Enabled |
|
| Local AV Enabled |
|
| YARA Enabled |
|
| Number of AV Matches | 1 |
| Number of YARA Matches | 0 |
| Termination Reason | Timeout |
| Tags |
