General
-
Target
9cee5522a7ca2bfca7cd3d9daba23e9a30deb6205f56c12045839075f7627297.zip
-
Size
16KB
-
Sample
200811-y76cd76mr6
-
MD5
176cd696484a91dd1305c6076c8ebc34
-
SHA1
9ff7516e39c0e5eb8fa338b743a5ddd320140908
-
SHA256
456a3e62b5a56cae8c3548b5fd1976b89efd0a2f4045b44da46dbe54c09b42ef
-
SHA512
3e64b7c030b232b0c54b9cc73ed5162c3ad94f534c164ccd6c10ede0ba52666e6656988be38675c5fd874dc9d37e0bbe679c66111edb833e31958e79c8a24fb4
Static task
static1
Behavioral task
behavioral1
Sample
9cee5522a7ca2bfca7cd3d9daba23e9a30deb6205f56c12045839075f7627297.exe
Resource
win7v200722
Behavioral task
behavioral2
Sample
9cee5522a7ca2bfca7cd3d9daba23e9a30deb6205f56c12045839075f7627297.exe
Resource
win10v200722
Malware Config
Extracted
C:\\README.2b026f49.TXT
http://darksidedxcftmqa.onion/blog/article/id/6/dQDclB_6Kg-c-6fJesONyHoaKh9BtI8j9Wkw2inG8O72jWaOcKbrxMWbPfKrUbHC
http://darksidfqzcuhtk2.onion/K71D6P88YTX04R3ISCJZHMD5IYV55V9247QHJY0HJYUXX68H2P05XPRIR5SP2U68
Targets
-
-
Target
9cee5522a7ca2bfca7cd3d9daba23e9a30deb6205f56c12045839075f7627297
-
Size
17KB
-
MD5
f87a2e1c3d148a67eaeb696b1ab69133
-
SHA1
d1dfe82775c1d698dd7861d6dfa1352a74551d35
-
SHA256
9cee5522a7ca2bfca7cd3d9daba23e9a30deb6205f56c12045839075f7627297
-
SHA512
e361811b07a66d9a784be37bdace0bdec9e11374083d7ccf7d9830e47a59afa8b9d12d80d4d47ea1932116354ad60bbc8ea6a6a265885d264b35486986415ea3
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Modifies service
-