General
-
Target
7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e.bin
-
Size
2.9MB
-
Sample
220120-xnsp4sbbfm
-
MD5
8e1f22dd9e809ead5e19b340b0c80cae
-
SHA1
2a53525eeb7b76b3d1bfe40ac349446f2add8784
-
SHA256
7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e
-
SHA512
be15ca5203ea0a5ea8ac6459b9d47d74f36e5830a1545faf5b7e9697afa377c7cf7a1cc57358c62d35f5f67c03d71fbbaff25c6994c42ef08c469981e74b118b
Static task
static1
Behavioral task
behavioral1
Sample
7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e.bin.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e.bin.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
blackcat
-
enable_network_discovery
true
-
enable_self_propagation
true
-
enable_set_wallpaper
true
-
extension
wpzlbji
-
note_file_name
RECOVER-${EXTENSION}-FILES.txt
-
note_full_text
>> Introduction Important files on your system was ENCRYPTED and now they have have "${EXTENSION}" extension. In order to recover your files you need to follow instructions below. >> Sensitive Data Sensitive data on your system was DOWNLOADED and it will be PUBLISHED if you refuse to cooperate. Data includes: - Employees personal data, CVs, DL, SSN. - Complete network map including credentials for local and remote services. - Financial information including clients data, bills, budgets, annual reports, bank statements. - Complete datagrams/schemas/drawings for manufacturing in solidworks format - And more... >> CAUTION DO NOT MODIFY FILES YOURSELF. DO NOT USE THIRD PARTY SOFTWARE TO RESTORE YOUR DATA. YOU MAY DAMAGE YOUR FILES, IT WILL RESULT IN PERMANENT DATA LOSS. YOUR DATA IS STRONGLY ENCRYPTED, YOU CAN NOT DECRYPT IT WITHOUT CIPHER KEY. >> Recovery procedure Follow these simple steps to get in touch and recover your data: 1) Download and install Tor Browser from: https://torproject.org/ 2) Navigate to: http://2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onion/?access-key=${ACCESS_KEY}
Targets
-
-
Target
7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e.bin
-
Size
2.9MB
-
MD5
8e1f22dd9e809ead5e19b340b0c80cae
-
SHA1
2a53525eeb7b76b3d1bfe40ac349446f2add8784
-
SHA256
7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e
-
SHA512
be15ca5203ea0a5ea8ac6459b9d47d74f36e5830a1545faf5b7e9697afa377c7cf7a1cc57358c62d35f5f67c03d71fbbaff25c6994c42ef08c469981e74b118b
Score1/10 -