General
- Target win.bin.zip
- Size 2.4MB
- Sample200903-nn7y32a41e
- SHA256 a2de3fcae1e3bedd417e90dd4bac8644165632e1bae2c7cdaa3f500c9f19bfa7
- MD5 8c5e7cc4f2e674ec7b5cf52bc270c5df
- SHA1 dfc2000d44deb2eb785c63927de14bd44d200e00
- SHA512 5ce3d90517e3912b62945eb839ad0100278355730037b8afdc1c042a0a4dda3328da253da063e82733e150832ad37ae564339b188f8356e4560308a9c2c40d54
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
win.bin.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
win.bin.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Path
-
\??\c:\ReadMe.txt
Ransom Note
- Hello IF YOU ARE READING THIS, IT MEANS YOUR DATA IS ENCRYPTED AND YOUR PRIVATE SENSIVITIVE INFORMATION WAS STOLEN! READ CAREFULLY THE WHOLE INSTRUCTIONS TO AVOID PROBLEMS WITH YOUR DATA YOU HAVE TO CONTACT US IMMEDIATELY TO RESOLVE THIS ISSUE AND MAKE A DEAL! !!!WARNING!!! DO NOT Modify, Rename, Copy or Move any file. You can DAMAGE them and decryption will be impossible! DO NOT Use any third-party or public decryption software, it also may DAMAGE files. DO NOT SHUTDOWN or RESET your system, it can damage files. There is ONLY ONE possible way to get back your files Do not waste your time, contact us and pay for special DECRYPTION KEY. The key is all you need. For your guarantee we will decrypt 2 of your files for free, as a proof that it works. Your network was fully COMPROMISED! We Can discuss how to secure it as a bonus. The data that we gathered could be published in MASS MEDIA for BREAKING NEWS! If we make a deal everything would be kept in secret and all your data will be restored. I could make them public them if you decide not to pay. contact us immediately: [email protected]
Emails
Targets
-
- Target win.bin
- Size 4.7MB
- SHA256 f8766ecc7775a6b14e6e46ef1e162cb609179c7a44e39a393c8fcd2ef0cd8ff0
- MD5 5c53adced5f26c4d2e5112316a67ffd1
- SHA1 c64636e272b0d1e881c68fda45df4f9c19d4aadc
- SHA512 78687f9f8d1364e4caf6a3d553b3559ccf0e5d5443494fbc14639ec2f98e25e999962985bb71477fa1773a75b74e367388f1f628ccf85de531f39dad9815eead
- MD5 SHA1 SHA512
Score10/10-
Drops desktop.ini file(s)