Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10_x64 -
resource
win10v200722 -
submitted
26-08-2020 08:43
General
-
Target
Jackpot Test Ransomware.bin.exe
Score
10/10
Malware Config
Extracted
Path
C:\Users\Admin\Desktop\payment request.txt
Family
jackpot
Ransom Note
.$$$ $$$$ .$$$$ $$$: $$$ ~$$$$$= $$$$ $$$$$$
.$$$ $$$$ .$$$$$ $$$: $$$ I$$$$$$$ $$$$$$ $$$$$$
.$$$ ~$$$$, $$$7 $$$:$$$. I$$ $$$ $$$ $$$ $$$?
.$$$ $$$$$$ $$$ $$$:$$$ I$$ $$$ $$$ $$$ $$$?
.$$$ $$I$$$ $$$ $$$$$$ I$$$$$$ $$$ $$$ $$$?
.$$$ .$$ $$$ $$$ $$$:$$$ I$$$$ $$$ $$$ $$$?
.$$$ I$$ 7$$+ $$$, $$$:$$$. I$$? $$$ $$$ $$$?
.$$$ $$$$$$$$ $$$$ $$$:+$$$ I$$? +$$$$$$ $$$?
.$$$ $$$ $$$. $$$$ $$$: $$$ I$$? $$$$$$ $$$?
.$$$7
.$$$.
.++++++++++++++. .+++++++++++++++. .+++++++++++++.
$ 7$..~$$$$,.. ,7 $ ..$. .$ .$ $ . . $
$ . $7I. ..,$$ $ $ :$$$$$$$$$$$I $ $ $$$$7. I
$ . $..$ $.:$~ $$.$$$ $I $ $ ,$ .$ I
$ .. $ $.:$ .$ =$ .$I $ $ .$7.7$7$$$$=. I
$ 7$$$$. $ $.:$. $$ :$, $I $ $ =.. . $?7.I
$ ~$7 ,$$ $ $.:$ .$ .=$ $I $ $ ... I
$ .$: .$. $ $.:$$$$$$$$$$$I $ $ I
$ .$ $. $ $ $ $ $$$$$$ I
$ $$$$$$$$$$$$ $ $ $ $ .$= . $$. I
$ .$$$$$7$$$$$$ $ $ . $ $ $$ $$. I
$ .$..$$..$ .$$ $ $ $.$$.$. $ $ $I .$$ I
$ .$ .$$ ,$ .$$ $ $ 7$$ .7$$. $ $ .$$$$$$$$$$$$.I
$ .$. $7. $. I$ $ $ .~. I$ .,. $ $ .$$ $$?~$$.$$ I
$ .$7,$$ $$$.$$ $ $ ? . . ~ . $ $ .$ .$$ .$. ,$ I
$ .$$$$$$$$$$$$.$ $ $. $ $ $ .$$ $$ .$$ .$ I
$ . $ $ I7 $$ $ $ .$ $$ .$...$ I
$ ..77$7 $ $ $ $ .$$7$$7$$$7$$ I
$ .$.. ..$. $ $ $ $ I
$ ~$7$$$=$$$ $ $ $$$$ $ $ I
$ $.$$.$7?7 $ $ $ $$... $ $ $$.?$+ $
'++++++++++++++' '+++++++++++++++' '+++++++++++++++'
All your important files are encrypted.
To decrypt your files, pay 1 BTC ~= 6.436 USD to the BitCoin address:
5vnC8GqF2nv2h8HuJMNa7KU10B5u2WgLLmr
Wallets
5vnC8GqF2nv2h8HuJMNa7KU10B5u2WgLLmr
Signatures
-
Jackpot Ransomware
Simple ransomware first seen in early 2020.
-
Modifies extensions of user files 10 IoCs
Ransomware generally changes the extension on encrypted files.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Jackpot Test Ransomware.bin.exe"C:\Users\Admin\AppData\Local\Temp\Jackpot Test Ransomware.bin.exe"1⤵
- Modifies extensions of user files
- Suspicious use of SetWindowsHookEx