Overview

overview

10

Static

static

3

Trustwallet.exe

windows7_x64

10

Trustwallet.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trustwallet.exe

  • Size

    11.9MB

  • Sample

    210822-8qakzmxqr6

  • MD5

    96a57994dac844201da03003ee2183ae

  • SHA1

    e7cd1448b9b33c928b25451a9f72de71b2dbc7bf

  • SHA256

    9353cf6347377bf1194349bff4001485fac99a5cd3ee03781e81c157452dae68

  • SHA512

    5f82aa92a1f15287884bc7fcb26f7b0bcf2db0444417c678e613c46f0c9da0833845ca1fefc10ea35ec58ad6d7c9c627081bdf94915e41f136b6abdf3e6cf6de

Score
10/10
demonwarepyinstallerransomware

Malware Config

Extracted

Path

C:\Users\Admin\Downloads\README.txt

Ransom Note
Locked Out? Ouch! we accept Bitcoins & all cryptocurrency [email protected] be rest assured,you get your files and your system back after payment.

Targets

    • Target

      Trustwallet.exe

    • Size

      11.9MB

    • MD5

      96a57994dac844201da03003ee2183ae

    • SHA1

      e7cd1448b9b33c928b25451a9f72de71b2dbc7bf

    • SHA256

      9353cf6347377bf1194349bff4001485fac99a5cd3ee03781e81c157452dae68

    • SHA512

      5f82aa92a1f15287884bc7fcb26f7b0bcf2db0444417c678e613c46f0c9da0833845ca1fefc10ea35ec58ad6d7c9c627081bdf94915e41f136b6abdf3e6cf6de

    Score
    10/10
    demonwareransomware

    • DemonWare

      Ransomware first seen in mid-2020.

      ransomwaredemonware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks