General
-
Target
fc611f9d09f645f31c4a77a27b6e6b1aec74db916d0712bef5bce052d12c971f
-
Size
506KB
-
Sample
200420-jryk6l2yka
-
MD5
e69a8eb94f65480980deaf1ff5a431a6
-
SHA1
dcd2ab4540bde88f58dec8e8c243e303ec4bdd87
-
SHA256
fc611f9d09f645f31c4a77a27b6e6b1aec74db916d0712bef5bce052d12c971f
-
SHA512
3338e225d51efef723a520f52385f01b590638a4da7ccf56b52f59f2cfc169cba8b2f0328d90a1a38eaaeb3074c54d0dd1f82ae7f2bd1b5658a4899a0f93a9d2
Static task
static1
Behavioral task
behavioral1
Sample
fc611f9d09f645f31c4a77a27b6e6b1aec74db916d0712bef5bce052d12c971f.exe
Resource
win7v200410
Behavioral task
behavioral2
Sample
fc611f9d09f645f31c4a77a27b6e6b1aec74db916d0712bef5bce052d12c971f.exe
Resource
win10v200410
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/869e0963707c15be
https://mazedecrypt.top/869e0963707c15be
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/86b60968efc3b97f
https://mazedecrypt.top/86b60968efc3b97f
Targets
-
-
Target
fc611f9d09f645f31c4a77a27b6e6b1aec74db916d0712bef5bce052d12c971f
-
Size
506KB
-
MD5
e69a8eb94f65480980deaf1ff5a431a6
-
SHA1
dcd2ab4540bde88f58dec8e8c243e303ec4bdd87
-
SHA256
fc611f9d09f645f31c4a77a27b6e6b1aec74db916d0712bef5bce052d12c971f
-
SHA512
3338e225d51efef723a520f52385f01b590638a4da7ccf56b52f59f2cfc169cba8b2f0328d90a1a38eaaeb3074c54d0dd1f82ae7f2bd1b5658a4899a0f93a9d2
Score10/10-
Drops startup file
-
Modifies service
-
Sets desktop wallpaper using registry
-