Overview

overview

10

Static

static

3

d46eaf1ca2...e_.exe

windows7_x64

10

d46eaf1ca2...e_.exe

windows10_x64

10

Resubmissions

20-03-2021 12:32

210320-gtx5d6h67a 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d46eaf1ca21fe46e0cde0f28a7db2ee7c34e710d11083472861522f8ccc20a94.exe_

  • Size

    9.8MB

  • Sample

    210320-gtx5d6h67a

  • MD5

    1916caf047d83174cb7ce28d07f54f25

  • SHA1

    02ca0f3ad95e5dbf3dfd1272db8cb77e5e6e3f49

  • SHA256

    d46eaf1ca21fe46e0cde0f28a7db2ee7c34e710d11083472861522f8ccc20a94

  • SHA512

    99159edf3e297826a1c355e8fcac4d381ec66ad28df8c39fb0ca29119e718d2cb9cb45a3cf6943704916abc4c4c1891b158a99faf15d27bf6257bdaffca18012

Score
10/10
demonwarepyinstallerransomware

Malware Config

Targets

    • Target

      d46eaf1ca21fe46e0cde0f28a7db2ee7c34e710d11083472861522f8ccc20a94.exe_

    • Size

      9.8MB

    • MD5

      1916caf047d83174cb7ce28d07f54f25

    • SHA1

      02ca0f3ad95e5dbf3dfd1272db8cb77e5e6e3f49

    • SHA256

      d46eaf1ca21fe46e0cde0f28a7db2ee7c34e710d11083472861522f8ccc20a94

    • SHA512

      99159edf3e297826a1c355e8fcac4d381ec66ad28df8c39fb0ca29119e718d2cb9cb45a3cf6943704916abc4c4c1891b158a99faf15d27bf6257bdaffca18012

    Score
    10/10
    demonwareransomware

    • DemonWare

      Ransomware first seen in mid-2020.

      ransomwaredemonware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks