Static task
static1
Behavioral task
behavioral1
Sample
ef3ff3f0.bin.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ef3ff3f0.bin.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
ef3ff3f0.bin.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
ef3ff3f0.bin.zip
-
Size
42KB
-
MD5
aa621b38df58d97064811739e7daaeb1
-
SHA1
75b6c92d835880c48ab802478a0f094ecc347669
-
SHA256
2e6408c502cde7413545fa9551b110d5bdbf0e1ce5642b39deb876120a6dfa24
-
SHA512
a2c231e50e62a551b6ddb206f56af5a93d26abebf5a7f393399eaf1ee2d206df07d81c9da8a1b10b8debacaff9a21bd4d9d66a7fcc9eae3f026aa237382a3d6e
Score
10/10
Malware Config
Signatures
-
Detected Netwalker Ransomware 1 IoCs
Detected unpacked Netwalker executable.
Processes:
resource yara_rule static1/unpack001/ef3ff3f0.bin netwalker_ransomware -
Netwalker family
Files
-
ef3ff3f0.bin.zip.zip
Password: infected
-
ef3ff3f0.bin.exe windows x86