General
-
Target
software-launcher
-
Size
207KB
-
Sample
200903-xvmltld6ze
-
MD5
900c456cbcd61ed2bf91378112e93eb0
-
SHA1
c227ca088a4f80729b83396cafa0152d9778254e
-
SHA256
fd945e2cc6d1b3a453135d5df04eeccbfd16f76e0744dd27b99e0eccaa9053bd
-
SHA512
e9e71efbe7e70ece0d5022c401d6cb8c808237946b6a30fcfe18d8d43ea93460c04977015daf05a7baa5a9f1467c5ffdcf499a52706c27a0055529a3f38f0ba7
Static task
static1
Behavioral task
behavioral1
Sample
software-launcher.exe
Resource
win7
Behavioral task
behavioral2
Sample
software-launcher.exe
Resource
win10
Malware Config
Targets
-
-
Target
software-launcher
-
Size
207KB
-
MD5
900c456cbcd61ed2bf91378112e93eb0
-
SHA1
c227ca088a4f80729b83396cafa0152d9778254e
-
SHA256
fd945e2cc6d1b3a453135d5df04eeccbfd16f76e0744dd27b99e0eccaa9053bd
-
SHA512
e9e71efbe7e70ece0d5022c401d6cb8c808237946b6a30fcfe18d8d43ea93460c04977015daf05a7baa5a9f1467c5ffdcf499a52706c27a0055529a3f38f0ba7
Score10/10-
HiddenTear Ransomware
Open-Source ransomware available on Github since 2015, with many versions in the wild.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-