General
-
Target
6670405041553408.zip
-
Size
207KB
-
Sample
210722-eddnlyg9kx
-
MD5
33d6ddf4d74e7621b3e938a548072fa2
-
SHA1
575c4cc2069fdac3175325e86cecb6e45fd3513d
-
SHA256
3288972817811fd9b1c94019290cc1caff65160d5e88b6f90b605dacbe177df5
-
SHA512
e73c9050ee8f2c9538ef549e040fa6099b1339a82d8ac347292b707e2db5fd1f623f1d79600ebda754ae01b48e5c46c59992c9dd9d7e1fdc27430efdf2327cc2
Static task
static1
Behavioral task
behavioral1
Sample
43b7a60c0ef8b4af001f45a0c57410b7374b1d75a6811e0dfc86e4d60f503856.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
43b7a60c0ef8b4af001f45a0c57410b7374b1d75a6811e0dfc86e4d60f503856.exe
Resource
win10v20210410
Malware Config
Extracted
C:\$Recycle.Bin\GET_YOUR_FILES_BACK.txt
http://avos2fuj6olp6x36.onion
http://avos53nnmi4u6amh.onion/
Targets
-
-
Target
43b7a60c0ef8b4af001f45a0c57410b7374b1d75a6811e0dfc86e4d60f503856
-
Size
402KB
-
MD5
d285f1366d0d4fdae0b558db690497ea
-
SHA1
f6f94e2f49cd64a9590963ef3852e135e2b8deba
-
SHA256
43b7a60c0ef8b4af001f45a0c57410b7374b1d75a6811e0dfc86e4d60f503856
-
SHA512
0922a6698c9a63935289fed5f70eff7cd4603c113410e713bcff6039a70edd1b505af503fb0f9e19b21f56cacba1d774c9a51dc275be2a0d67477731c5cc2718
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-