General
-
Target
6577119386435584.zip
-
Size
1.7MB
-
Sample
210329-fgh4npj9ss
-
MD5
54163e1995740fe7bd326ea81e442cee
-
SHA1
45634f175337f95c3ddb8868e2c243eb22d6f327
-
SHA256
fa848d8b2491636e848a92acb2146bef8801d9fb317b3547198f0acc6eee6f9e
-
SHA512
f667493d15729354771dfa7107b8ce59321b57c2c70bf27e0e65783aa5a47e7beec649ecb3491c9c210197774801ff329d6245425189153e9681787875f2e1c9
Behavioral task
behavioral1
Sample
008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549
-
Size
1.9MB
-
MD5
d86f451bbff804e59a549f9fb33d6e3f
-
SHA1
3cb0cb07cc2542f1d98060adccda726ea865db98
-
SHA256
008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549
-
SHA512
c86ad7e1d5c445d4de9866faab578b2eb04f72ffef4fac380b7164003471b4b48b09772e735ea15205e2ab4a1f4d194d188cdeb12c7199d0824ddaba393dcaa2
Score9/10-
Executes dropped EXE
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Deletes itself
-
Loads dropped DLL
-