Overview
overview
10Static
static
10155eaec829...23.exe
windows7_x64
10155eaec829...23.exe
windows10_x64
108a68388787...97.exe
windows7_x64
108a68388787...97.exe
windows10_x64
109a9bf626d4...d6.exe
windows7_x64
109a9bf626d4...d6.exe
windows10_x64
10a9fb354944...06.exe
windows7_x64
10a9fb354944...06.exe
windows10_x64
10Behavioral task
behavioral1
Sample
155eaec829906d3b03ce5f8064200bcdb4023886816550dfd91bb5d20571df23.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
155eaec829906d3b03ce5f8064200bcdb4023886816550dfd91bb5d20571df23.exe
Resource
win10v20210408
Behavioral task
behavioral3
Sample
8a68388787a97c83448898eedb045f620f225538992467bae0ee5c1a1ca4dc97.exe
Resource
win7v20210410
Behavioral task
behavioral4
Sample
8a68388787a97c83448898eedb045f620f225538992467bae0ee5c1a1ca4dc97.exe
Resource
win10v20210408
Behavioral task
behavioral5
Sample
9a9bf626d4a3e9afe613f7eaa347acac600de2aecc45a5706aa2ba386625eed6.exe
Resource
win7v20210410
Behavioral task
behavioral6
Sample
9a9bf626d4a3e9afe613f7eaa347acac600de2aecc45a5706aa2ba386625eed6.exe
Resource
win10v20210410
Behavioral task
behavioral7
Sample
a9fb354944ee5879b6e13381952889c604d850fe18ef552185a1c228b3bb3d06.exe
Resource
win7v20210408
Behavioral task
behavioral8
Sample
a9fb354944ee5879b6e13381952889c604d850fe18ef552185a1c228b3bb3d06.exe
Resource
win10v20210410
General
-
Target
6059871321227264.zip
-
Size
190KB
-
MD5
d670333be42dfb91a9a031e1693d6efe
-
SHA1
53c0eabf5541f8be14107f3e18b53ba1ad8d8828
-
SHA256
a20a1cd9fa52d3f6bc62b6b629df2273d1c579f0fffce69d2bc64895c692fb19
-
SHA512
3d6c025431632dc5eba4fe6a7feb5ba4fa24892717f02b123c96ba1989dc866d4d931f097da270b774404dea5b4b7d6df3db1b12879431f084b6676a679221af
Malware Config
Signatures
-
Detected Netwalker Ransomware 1 IoCs
Detected unpacked Netwalker executable.
resource yara_rule static1/unpack001/9a9bf626d4a3e9afe613f7eaa347acac600de2aecc45a5706aa2ba386625eed6 netwalker_ransomware -
Detected Xorist Ransomware 2 IoCs
resource yara_rule static1/unpack001/155eaec829906d3b03ce5f8064200bcdb4023886816550dfd91bb5d20571df23 family_xorist static1/unpack001/8a68388787a97c83448898eedb045f620f225538992467bae0ee5c1a1ca4dc97 family_xorist -
Netwalker family
-
Xorist family
-
resource yara_rule static1/unpack001/8a68388787a97c83448898eedb045f620f225538992467bae0ee5c1a1ca4dc97 upx
Files
-
6059871321227264.zip.zip
Password: infected
-
155eaec829906d3b03ce5f8064200bcdb4023886816550dfd91bb5d20571df23.exe windows x86
-
8a68388787a97c83448898eedb045f620f225538992467bae0ee5c1a1ca4dc97.exe windows x86
-
9a9bf626d4a3e9afe613f7eaa347acac600de2aecc45a5706aa2ba386625eed6.exe windows x86
-
a9fb354944ee5879b6e13381952889c604d850fe18ef552185a1c228b3bb3d06.exe windows x86