General

  • Target
    win.bin.zip
  • Size 2.4MB
  • Sample200903-nn7y32a41e
  • SHA256 a2de3fcae1e3bedd417e90dd4bac8644165632e1bae2c7cdaa3f500c9f19bfa7
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Path
  • \??\c:\ReadMe.txt

Ransom Note
  • Hello IF YOU ARE READING THIS, IT MEANS YOUR DATA IS ENCRYPTED AND YOUR PRIVATE SENSIVITIVE INFORMATION WAS STOLEN! READ CAREFULLY THE WHOLE INSTRUCTIONS TO AVOID PROBLEMS WITH YOUR DATA YOU HAVE TO CONTACT US IMMEDIATELY TO RESOLVE THIS ISSUE AND MAKE A DEAL! !!!WARNING!!! DO NOT Modify, Rename, Copy or Move any file. You can DAMAGE them and decryption will be impossible! DO NOT Use any third-party or public decryption software, it also may DAMAGE files. DO NOT SHUTDOWN or RESET your system, it can damage files. There is ONLY ONE possible way to get back your files Do not waste your time, contact us and pay for special DECRYPTION KEY. The key is all you need. For your guarantee we will decrypt 2 of your files for free, as a proof that it works. Your network was fully COMPROMISED! We Can discuss how to secure it as a bonus. The data that we gathered could be published in MASS MEDIA for BREAKING NEWS! If we make a deal everything would be kept in secret and all your data will be restored. I could make them public them if you decide not to pay. contact us immediately: [email protected]

Targets

    • Target
      win.bin
    • Size 4.7MB
    • SHA256 f8766ecc7775a6b14e6e46ef1e162cb609179c7a44e39a393c8fcd2ef0cd8ff0
    • MD5 SHA1 SHA512
    Score
    10/10
    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks