Overview

overview

10

Static

static

e942a8bcb3...in.exe

windows7_x64

10

e942a8bcb3...in.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e942a8bcb3d4a6f6df6a6522e4d5c58d25cdbe369ecda1356a66dacbd3945d30.bin

  • Size

    643KB

  • Sample

    200710-t6cqb3fw8e

  • MD5

    ce9c4f5439c48aeeca3bc9f2cdfaf826

  • SHA1

    8ec10319d7a8f3dc651d4a66d3b8297abf1f895e

  • SHA256

    e942a8bcb3d4a6f6df6a6522e4d5c58d25cdbe369ecda1356a66dacbd3945d30

  • SHA512

    574549c5d2554889a96fd985a806ed01db0028890c5f114af7c59eb4b59990979652b214e92fb0126fc61719144ff162465020940d87c825e37744d92e43f4da

Score
10/10
ransomware

Malware Config

Extracted

Path

\??\Volume{a2da1a04-afea-11ea-ab7e-806e6f6e6963}\Program Files\7-Zip\Lang\!!FAQ for Decryption!!.txt

Ransom Note
Good day. All your files are encrypted. For decryption contact us. Write here achtung_admin@protonmail.com We also inform that your databases, ftp server and file server were downloaded by us to our servers. * Do not rename encrypted files. * Do not try to decrypt your data using third party software, it may cause permanent data loss.
Emails

achtung_admin@protonmail.com

Targets

    • Target

      e942a8bcb3d4a6f6df6a6522e4d5c58d25cdbe369ecda1356a66dacbd3945d30.bin

    • Size

      643KB

    • MD5

      ce9c4f5439c48aeeca3bc9f2cdfaf826

    • SHA1

      8ec10319d7a8f3dc651d4a66d3b8297abf1f895e

    • SHA256

      e942a8bcb3d4a6f6df6a6522e4d5c58d25cdbe369ecda1356a66dacbd3945d30

    • SHA512

      574549c5d2554889a96fd985a806ed01db0028890c5f114af7c59eb4b59990979652b214e92fb0126fc61719144ff162465020940d87c825e37744d92e43f4da

    Score
    10/10
    ransomware

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks