SadComputer.exe
Windows Exe (x86-32)
Created at 2019-04-12T14:41:00
VMRay Threat Indicators (10 rules, 17 matches)
| Severity | Category | Operation | Classification | |
|---|---|---|---|---|
|
5/5
|
Local AV | Malicious content was detected by heuristic scan | - | |
|
||||
|
||||
|
5/5
|
File System | Known malicious file | Trojan | |
|
||||
|
||||
|
4/5
|
File System | Modifies content of user files | Ransomware | |
|
||||
|
4/5
|
File System | Deletes user files | Wiper | |
|
||||
|
3/5
|
File System | Possibly drops ransom note files | Ransomware | |
|
||||
|
1/5
|
Persistence | Installs system startup script or application | - | |
|
||||
|
1/5
|
Masquerade | Changes folder appearance | - | |
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
1/5
|
Device | Monitors mouse movements and clicks | - | |
|
||||
|
1/5
|
File System | Creates an unusually large number of files | - | |
|
||||
|
1/5
|
Static | Unparsable sections in file | - | |
|
||||
Screenshots
Monitored Processes
Sample Information
| ID | #593245 |
| MD5 |
935a75e0c7702240cb530b31a83b7cbc
|
| SHA1 |
9119d564c43cbef183226ce532d8572c2888fe4d
|
| SHA256 |
a949bdbfa8255741acf437b34b506310c7210707f84aef6d8ef85e9c2ff1993a
|
| SSDeep |
3072:hvjQv3lYs4r95gN53dbER7XD4Eqtr7d5bsy7GAx+UUUzo5SuW7GElqwbGjFam/kN:hryYUxdAJ4Eqdd5bsy7GAxjudEhbsh
|
| ImpHash |
f34d5f2d4577ed6d9ceec516c1f5a744
|
| Filename | SadComputer.exe |
| File Size | 235.00 KB |
| Sample Type | Windows Exe (x86-32) |
Analysis Information
| Creation Time | 2019-04-12 16:41 (UTC+2) |
| Analysis Duration | 00:04:49 |
| Number of Monitored Processes | 1 |
| Execution Successful |
|
| Reputation Enabled |
|
| WHOIS Enabled |
|
| Local AV Enabled |
|
| YARA Enabled |
|
| Number of AV Matches | 2 |
| Number of YARA Matches | 0 |
| Termination Reason | Timeout |
| Tags |
