General
-
Target
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00.bin
-
Size
1.8MB
-
Sample
210101-63qhd66612
-
MD5
662b823d2472f494c5d539d0694cca77
-
SHA1
f8fc84030c579070b36c99c836ac4b5c32bbc2c4
-
SHA256
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00
-
SHA512
302d09017cd6bda0b78dbbae8d4353c03088e3244f8bbed242b8937125fa27086cfdf653ad3dbab9738ee0aee8010f378047916e19e2d323d64b993cc62e441d
Static task
static1
Behavioral task
behavioral1
Sample
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00.bin.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00.bin.exe
Resource
win10v20201028
Malware Config
Extracted
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\HOW-TO-DECRYPT-kgkq9.txt
Targets
-
-
Target
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00.bin
-
Size
1.8MB
-
MD5
662b823d2472f494c5d539d0694cca77
-
SHA1
f8fc84030c579070b36c99c836ac4b5c32bbc2c4
-
SHA256
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00
-
SHA512
302d09017cd6bda0b78dbbae8d4353c03088e3244f8bbed242b8937125fa27086cfdf653ad3dbab9738ee0aee8010f378047916e19e2d323d64b993cc62e441d
Score10/10-
Executes dropped EXE
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Deletes itself
-
Loads dropped DLL
-