General
-
Target
zzgssg.exe
-
Size
915KB
-
Sample
210219-pt5cnej4y2
-
MD5
b7ed2cd216eaf988c160f4f9e66c05ab
-
SHA1
4e8f4780e002f791d7bcd33a45072746ed00efd6
-
SHA256
f074bac428fe4d2ea36f7934f22007bac18077504acf19f29ae49797c2097c27
-
SHA512
db2fc235af6a5bc751e599586ba216ae6f6d7f0f7f78ee9928a6e4637d2618e2be4e401c3478e3dfe41e079de6e0dbec9a208b46637a4ab9345783ce04d47b33
Static task
static1
Behavioral task
behavioral1
Sample
zzgssg.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
zzgssg.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
zzgssg.exe
-
Size
915KB
-
MD5
b7ed2cd216eaf988c160f4f9e66c05ab
-
SHA1
4e8f4780e002f791d7bcd33a45072746ed00efd6
-
SHA256
f074bac428fe4d2ea36f7934f22007bac18077504acf19f29ae49797c2097c27
-
SHA512
db2fc235af6a5bc751e599586ba216ae6f6d7f0f7f78ee9928a6e4637d2618e2be4e401c3478e3dfe41e079de6e0dbec9a208b46637a4ab9345783ce04d47b33
Score9/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Sets desktop wallpaper using registry
-