Overview

overview

10

Static

static

3

d38fd7b985...18.exe

windows7_x64

7

d38fd7b985...18.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4943495458619392.zip

  • Size

    20.6MB

  • Sample

    210818-p3whwdrhje

  • MD5

    3bf695f8377f16872874c39fa43faeb8

  • SHA1

    14220d85d742928d0d66abb2f5d966db9b56a116

  • SHA256

    3ff874229624d3fc0369955df1e79a3b93fd16010f52051eeeabd973ccf173f2

  • SHA512

    c719dc14ed898e4657a98cc7734fc0a43d7e26059a2e47b192aa92dbbcfa0acf394bc72284998de238a793aa542b00583400f5b3e7b283373a9dccd3f707b6f3

Score
10/10
pyinstallerransomware

Malware Config

Extracted

Path

C:\Users\Admin\Downloads\README.txt

Ransom Note
Tango Down! Your Computer has been Locked and Your Files Haven Been Encrypted Don't Panic, you get have your files back! Your files will be deleted when the timer runs out, so you better hurry. You have 10 hours to get your key You are adviced to get your bitcoins ready for negotiations send us a mail to get your system back, cryptonation92@outlook.com Zeznzo
Emails

cryptonation92@outlook.com

Targets

    • Target

      d38fd7b985618045a015257f76b115ad1c751ad9d8003d9c41af6f9fa8d7c918

    • Size

      21.0MB

    • MD5

      078265af9fd10064a23cac405a144677

    • SHA1

      a94acc3a65654dc9583c927b357ce096bf207606

    • SHA256

      d38fd7b985618045a015257f76b115ad1c751ad9d8003d9c41af6f9fa8d7c918

    • SHA512

      a177e3ef3c126b41dddede3e9dc0e6df748215447a018d97bacdb0191e7a46149bb6d7f9fc49a088588fe77be0637130502497f8cf64abd45ef0d13015bdb147

    Score
    10/10
    ransomware

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks