Overview

overview

10

Static

static

10

fd945e2cc6...le.exe

windows7_x64

10

fd945e2cc6...le.exe

windows10_x64

10

Resubmissions

03-08-2021 07:41

210803-qwfhgtkjv6 10

26-07-2021 12:41

210726-dxe6lafqxn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd945e2cc6d1b3a453135d5df04eeccbfd16f76e0744dd27b99e0eccaa9053bd.sample

  • Size

    207KB

  • Sample

    210803-qwfhgtkjv6

  • MD5

    900c456cbcd61ed2bf91378112e93eb0

  • SHA1

    c227ca088a4f80729b83396cafa0152d9778254e

  • SHA256

    fd945e2cc6d1b3a453135d5df04eeccbfd16f76e0744dd27b99e0eccaa9053bd

  • SHA512

    e9e71efbe7e70ece0d5022c401d6cb8c808237946b6a30fcfe18d8d43ea93460c04977015daf05a7baa5a9f1467c5ffdcf499a52706c27a0055529a3f38f0ba7

Score
10/10
hiddentearransomwaresuricata

Malware Config

Targets

    • Target

      fd945e2cc6d1b3a453135d5df04eeccbfd16f76e0744dd27b99e0eccaa9053bd.sample

    • Size

      207KB

    • MD5

      900c456cbcd61ed2bf91378112e93eb0

    • SHA1

      c227ca088a4f80729b83396cafa0152d9778254e

    • SHA256

      fd945e2cc6d1b3a453135d5df04eeccbfd16f76e0744dd27b99e0eccaa9053bd

    • SHA512

      e9e71efbe7e70ece0d5022c401d6cb8c808237946b6a30fcfe18d8d43ea93460c04977015daf05a7baa5a9f1467c5ffdcf499a52706c27a0055529a3f38f0ba7

    Score
    10/10
    hiddentearransomwaresuricata

    • HiddenTear Ransomware

      Open-Source ransomware available on Github since 2015, with many versions in the wild.

      ransomwarehiddentear

    • suricata: ET MALWARE Observed Reimageplus Ransomware Domain in TLS SNI

      suricata

    • suricata: ET MALWARE Reimageplus Ransomware Checkin

      suricata

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks