Overview

overview

10

Static

static

6

194270766c...f6.exe

windows7_x64

10

194270766c...f6.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1.bin.zip
  • Size 1.0MB
  • Sample200704-drvs321ale
  • SHA256 73c129ab01e74eb487bc6b6484a9f5085c6f78134493a73637ca7d355b2b587e
  • MD5 SHA1 SHA512
Score
10/10
evasionpersistenceransomwarespywaretrojan

Malware Config

Extracted

Path

  • C:\Users\Admin\Desktop\READ_ME_Heyyyyyyy.txt

Ransom Note
  • All your files have been encrypted! All your documents (databases, texts, images, videos, musics etc.) were encrypted. The encryption was done using a secret keythat is now on our servers. To decrypt your files you will need to buy the secret key from us. We are the only on the world who can provide this for you. What can I do? Pay the ransom, in bitcoins, in the amount and wallet below. You can use www.coindirect.com/de - coinbase.com - coinmama.com - LocalBitcoins.com to buy bitcoins. 0,036 Bitcoin = 300 EURO Send BTC Address = 1NxoWvpXufC5PkagnfWD9Rf19wm5jchVkX
Wallets

  • 1NxoWvpXufC5PkagnfWD9Rf19wm5jchVkX

Targets

    • Target
      194270766c8afe4cdd99c8f1ebdbc18321bd79ac6f2f3e0c0638ea93ffe8aaf6
    • Size 2.0MB
    • SHA256 194270766c8afe4cdd99c8f1ebdbc18321bd79ac6f2f3e0c0638ea93ffe8aaf6
    • MD5 SHA1 SHA512
    Score
    10/10
    ransomwareevasionspywaretrojanpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks