Overview

overview

10

Static

static

8181c98ed2...in.exe

windows7_x64

10

8181c98ed2...in.exe

windows10_x64

10

Analysis

  • max time kernel
    6s
  • max time network
    124s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    28/09/2020, 10:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    8181c98ed221d00c89712ea50d37179dc633b9e04bfc2aca1b7df26fd3db1f4e.bin.exe
  • Size 18KB
  • Sample200928-7bsdqsxae6
  • SHA256 8181c98ed221d00c89712ea50d37179dc633b9e04bfc2aca1b7df26fd3db1f4e
  • MD5 SHA1 SHA512
Score
10/10
ransomwaredusk

Malware Config

Extracted

Path

  • C:\Users\Admin\Desktop\!#!READ-ME!#!.txt

  • dusk

Ransom Note
  • ------------------------------ ____ __ _______ __ __ / __ \/ / / / ___// //_/ / / / / / / /\__ \/ ,< / /_/ / /_/ /___/ / /| | /_____/\____//____/_/ |_| ------------------------------ Dusk v1.0 YOUR FILES ARE ENCRYPTED! ------------------------------ If you want to recover them follow these steps: 1. Send $50 to this address: BTC: 1EiGoumJiBNJszEzTzasmQhCVaEYDDEbuo 2. Send email to: [email protected] 3. Enjoy! ------------------------------ Do not waste your time trying recover your files using third party services! Only we can do that
Wallets

  • 1EiGoumJiBNJszEzTzasmQhCVaEYDDEbuo

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\8181c98ed221d00c89712ea50d37179dc633b9e04bfc2aca1b7df26fd3db1f4e.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\8181c98ed221d00c89712ea50d37179dc633b9e04bfc2aca1b7df26fd3db1f4e.bin.exe"
    1⤵
      PID:3104

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3104-0-0x00007FFA23F00000-0x00007FFA248EC000-memory.dmp
          Download

          memory/3104-1-0x0000000000700000-0x0000000000701000-memory.dmp
          Download