Overview

overview

10

Static

static

271ef3c1d0...ad.exe

windows7_x64

10

271ef3c1d0...ad.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    271ef3c1d022829f0b15f2471d05a28d4786abafd0a9e1e742bde3f6b36872ad.zip
  • Size 441KB
  • Sample200804-d3e1b2phf6
  • SHA256 6b028397217f8d8185e2026da3a6ed4e12a32d0e02a365aafc39b9a1362197f3
  • MD5 SHA1 SHA512
Score
10/10
ransomware

Malware Config

Extracted

Path

  • \??\Volume{a2da1a04-afea-11ea-ab7e-806e6f6e6963}\Program Files\7-Zip\Lang\!!FAQ for Decryption!!.txt

Ransom Note
  • Good day. All your files are encrypted. For decryption contact us. Write here [email protected] We also inform that your databases, ftp server and file server were downloaded by us to our servers. * Do not rename encrypted files. * Do not try to decrypt your data using third party software, it may cause permanent data loss.

Targets

    • Target
      271ef3c1d022829f0b15f2471d05a28d4786abafd0a9e1e742bde3f6b36872ad.exe
    • Size 1.1MB
    • SHA256 271ef3c1d022829f0b15f2471d05a28d4786abafd0a9e1e742bde3f6b36872ad
    • MD5 SHA1 SHA512
    Score
    10/10
    ransomware

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks