General
-
Target
xxx.exe
-
Size
2.5MB
-
Sample
211027-jaa19aahb7
-
MD5
e358685d7f843a7c91a6ba328f4d900c
-
SHA1
05aaba7ad51b253861714ff74a665461606e14ab
-
SHA256
148845af1fc1221f27992cac24273aada38ef2482624850897bce87413f79888
-
SHA512
69f5dc5bd415e69554a274fbda8fed69d79e216496f7907436161537c5a52ca2e299a381a13bf5fc1948b121c23866e66c5a244a066cb46d98e4e3a97f8a6b1e
Static task
static1
Behavioral task
behavioral1
Sample
xxx.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
xxx.exe
Resource
win10-en-20210920
Malware Config
Extracted
C:\$Recycle.Bin\PUSSY!!!DANGER.txt
http://corpleaks.net
http://hxt254aygrsziejn.onion
Targets
-
-
Target
xxx.exe
-
Size
2.5MB
-
MD5
e358685d7f843a7c91a6ba328f4d900c
-
SHA1
05aaba7ad51b253861714ff74a665461606e14ab
-
SHA256
148845af1fc1221f27992cac24273aada38ef2482624850897bce87413f79888
-
SHA512
69f5dc5bd415e69554a274fbda8fed69d79e216496f7907436161537c5a52ca2e299a381a13bf5fc1948b121c23866e66c5a244a066cb46d98e4e3a97f8a6b1e
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-