Overview
overview
10Static
static
1044b5d24e5e...in.exe
windows7_x64
144b5d24e5e...in.exe
windows10_x64
15987a6e42c...in.exe
windows7_x64
35987a6e42c...in.exe
windows10_x64
36424307ea2...in.exe
windows7_x64
16424307ea2...in.exe
windows10_x64
18e3993583c...in.exe
windows7_x64
18e3993583c...in.exe
windows10_x64
1ce399a2d07...in.exe
windows7_x64
1ce399a2d07...in.exe
windows10_x64
1d40a3503a9...in.exe
windows7_x64
1d40a3503a9...in.exe
windows10_x64
1d77901484e...in.exe
windows7_x64
1d77901484e...in.exe
windows10_x64
1Static task
static1
Behavioral task
behavioral1
Sample
44b5d24e5e8fd8e8ee7141f970f76a13c89dd26c44b336dc9d6b61fda3abf335.bin.exe
Resource
win7-en
Behavioral task
behavioral2
Sample
44b5d24e5e8fd8e8ee7141f970f76a13c89dd26c44b336dc9d6b61fda3abf335.bin.exe
Resource
win10-en
Behavioral task
behavioral3
Sample
5987a6e42c3412086b7c9067dc25f1aaa659b2b123581899e9df92cb7907a3ed.bin.exe
Resource
win7v20210408
Behavioral task
behavioral4
Sample
5987a6e42c3412086b7c9067dc25f1aaa659b2b123581899e9df92cb7907a3ed.bin.exe
Resource
win10-en
Behavioral task
behavioral5
Sample
6424307ea25f1889e4b9fb8a64d860e42681cddf71a5a70af7963ab282225c8d.bin.exe
Resource
win7v20210408
Behavioral task
behavioral6
Sample
6424307ea25f1889e4b9fb8a64d860e42681cddf71a5a70af7963ab282225c8d.bin.exe
Resource
win10-en
Behavioral task
behavioral7
Sample
8e3993583cd2506ccbac4b247949ddee7d6971432576a0f9c485f9f0942054ae.bin.exe
Resource
win7-en
Behavioral task
behavioral8
Sample
8e3993583cd2506ccbac4b247949ddee7d6971432576a0f9c485f9f0942054ae.bin.exe
Resource
win10v20210408
Behavioral task
behavioral9
Sample
ce399a2d07c0851164bd8cc9e940b84b88c43ef564846ca654df4abf36c278e6.bin.exe
Resource
win7-en
Behavioral task
behavioral10
Sample
ce399a2d07c0851164bd8cc9e940b84b88c43ef564846ca654df4abf36c278e6.bin.exe
Resource
win10v20210408
Behavioral task
behavioral11
Sample
d40a3503a960663187a83f560e94563cd11606a610a4b176b0ac065af037f175.bin.exe
Resource
win7-en
Behavioral task
behavioral12
Sample
d40a3503a960663187a83f560e94563cd11606a610a4b176b0ac065af037f175.bin.exe
Resource
win10v20210408
Behavioral task
behavioral13
Sample
d77901484e91445d8d11b82ff487b9e56b48930fe3086e5858ea754e9f490c1f.bin.exe
Resource
win7-en
Behavioral task
behavioral14
Sample
d77901484e91445d8d11b82ff487b9e56b48930fe3086e5858ea754e9f490c1f.bin.exe
Resource
win10-en
General
-
Target
samples.zip
-
Size
672KB
-
MD5
7e2f672a9c6a047d62a6ab916ae69bbc
-
SHA1
d9a517517c88eb318ef2b5f05211bbd9a138df64
-
SHA256
cd9f4545497982e34ff0cff1d26e4b8d4a46ff76715e815a06d5079f27117b1c
-
SHA512
f2bb4cb5cef8917ec1e1a8fe8de84c4eb5cec9183b371b78e341a7af93f8f7444c7c483691f81412c81ce278a41a150d1bb11f8f2dbb6d8cddc2753f805fe643
Malware Config
Signatures
-
Detected Netwalker Ransomware 2 IoCs
Detected unpacked Netwalker executable.
Processes:
resource yara_rule static1/unpack001/44b5d24e5e8fd8e8ee7141f970f76a13c89dd26c44b336dc9d6b61fda3abf335.bin netwalker_ransomware static1/unpack001/ce399a2d07c0851164bd8cc9e940b84b88c43ef564846ca654df4abf36c278e6.bin netwalker_ransomware -
Netwalker family
-
StrongPity Spyware 4 IoCs
Processes:
resource yara_rule static1/unpack001/6424307ea25f1889e4b9fb8a64d860e42681cddf71a5a70af7963ab282225c8d.bin family_strongpity static1/unpack001/8e3993583cd2506ccbac4b247949ddee7d6971432576a0f9c485f9f0942054ae.bin family_strongpity static1/unpack001/d40a3503a960663187a83f560e94563cd11606a610a4b176b0ac065af037f175.bin family_strongpity static1/unpack001/d77901484e91445d8d11b82ff487b9e56b48930fe3086e5858ea754e9f490c1f.bin family_strongpity -
Strongpity family
Files
-
samples.zip.zip
-
44b5d24e5e8fd8e8ee7141f970f76a13c89dd26c44b336dc9d6b61fda3abf335.bin.exe windows x86
-
5987a6e42c3412086b7c9067dc25f1aaa659b2b123581899e9df92cb7907a3ed.bin.exe windows x86
-
6424307ea25f1889e4b9fb8a64d860e42681cddf71a5a70af7963ab282225c8d.bin.exe windows x86
-
8e3993583cd2506ccbac4b247949ddee7d6971432576a0f9c485f9f0942054ae.bin.exe windows x86
-
ce399a2d07c0851164bd8cc9e940b84b88c43ef564846ca654df4abf36c278e6.bin.exe windows x86
-
d40a3503a960663187a83f560e94563cd11606a610a4b176b0ac065af037f175.bin.exe windows x86
-
d77901484e91445d8d11b82ff487b9e56b48930fe3086e5858ea754e9f490c1f.bin.exe windows x86