General
- Target 5654EC48D1C85430A2E3BEE153EB9A60.exe
- Size 803KB
- Sample210504-s8mgdkfxmx
- SHA256 7d9380fb533f6af97982464579db90dcffe42067d07d570a9857f4b0e5d37862
Score
10/10
Malware Config
Extracted
Path
-
C:\how_to_recover.html
-
hanta
Ransom Note
- HANTA VIRUS WHAT HAPPENED WITH MY COMPUTER? All Files on your system has been encrypted with HANTA Virus. Nobody will be able to decrypt ANY of your files without our decryption service. Dont waste your time. CAN I RECOVER MY FILES? You will be able to recover your files only after you send amount$ in BTC to this BTC wallet: 1HYpnNyAERfmC5bnueGs7E3qDgMAxRiLGC or contact with us by email: [email protected] Your system indetification: 89bbad60-16d5-41c2-ad8d-716f4ac5f4c2 Your personal key: -----BEGIN PUBLIC KEY----- -----END PUBLIC KEY----- Any antivirus sortware can corrupt files, if you want save back your files, turn off antivirus, it can delete our application
Emails
Wallets
-
1HYpnNyAERfmC5bnueGs7E3qDgMAxRiLGC
Targets
-
- Target 5654EC48D1C85430A2E3BEE153EB9A60.exe
- Size 803KB
- SHA256 7d9380fb533f6af97982464579db90dcffe42067d07d570a9857f4b0e5d37862
Score10/10-
HANTA Ransomware
Ransomware family first detected in March 2021 with multiple minor variants observed.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies file permissions