General
-
Target
39908c43e4124d6fd3362a5cf04cfbc4ac601ee35faf84a21c7979fdf74f05a6.exe
-
Size
2.7MB
-
Sample
210516-3zbrl6tdse
-
MD5
631101614bb5dac04fed6a14470b045e
-
SHA1
8a5b126a8d49865551a993166c070aed739bcddb
-
SHA256
39908c43e4124d6fd3362a5cf04cfbc4ac601ee35faf84a21c7979fdf74f05a6
-
SHA512
e60c799a16b27425ef038723d81fb03c0bd39dc8b5b217201a26ccf9bc1e8d9cd1f7e232c5a29bd7808e5eacf67b07e0c873b2af9ef8e41e3b04d5875aca81ee
Static task
static1
Behavioral task
behavioral1
Sample
39908c43e4124d6fd3362a5cf04cfbc4ac601ee35faf84a21c7979fdf74f05a6.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
39908c43e4124d6fd3362a5cf04cfbc4ac601ee35faf84a21c7979fdf74f05a6.exe
Resource
win10v20210410
Malware Config
Extracted
https://moonlightkrippe.ch/DesktopModules/Journal/clear.txt
Extracted
C:\Decrypt_files.txt
https://drive.google.com/file/d/1QAhLOX-sQuyjk31LPPpseRlhaLKEZ_t7/view
https://t.me/Decrypt8070
https://crypto.com
https://www.binance.com
Extracted
C:\Users\Admin\Desktop\Decrypt_files.txt
https://drive.google.com/file/d/1QAhLOX-sQuyjk31LPPpseRlhaLKEZ_t7/view
https://t.me/Decrypt8070
https://crypto.com
https://www.binance.com
Extracted
C:\Decrypt_files.txt
https://drive.google.com/file/d/1QAhLOX-sQuyjk31LPPpseRlhaLKEZ_t7/view
https://t.me/Decrypt8070
https://crypto.com
https://www.binance.com
Extracted
C:\Users\Admin\Desktop\Decrypt_files.txt
https://drive.google.com/file/d/1QAhLOX-sQuyjk31LPPpseRlhaLKEZ_t7/view
https://t.me/Decrypt8070
https://crypto.com
https://www.binance.com
Extracted
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Decrypt_files.txt
https://drive.google.com/file/d/1QAhLOX-sQuyjk31LPPpseRlhaLKEZ_t7/view
https://t.me/Decrypt8070
https://crypto.com
https://www.binance.com
Targets
-
-
Target
39908c43e4124d6fd3362a5cf04cfbc4ac601ee35faf84a21c7979fdf74f05a6.exe
-
Size
2.7MB
-
MD5
631101614bb5dac04fed6a14470b045e
-
SHA1
8a5b126a8d49865551a993166c070aed739bcddb
-
SHA256
39908c43e4124d6fd3362a5cf04cfbc4ac601ee35faf84a21c7979fdf74f05a6
-
SHA512
e60c799a16b27425ef038723d81fb03c0bd39dc8b5b217201a26ccf9bc1e8d9cd1f7e232c5a29bd7808e5eacf67b07e0c873b2af9ef8e41e3b04d5875aca81ee
Score10/10-
Clears Windows event logs
-
Blocklisted process makes network request
-