General
-
Target
0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d
-
Size
59KB
-
Sample
220131-gpxsfsfggm
-
MD5
885fc8fb590b899c1db7b42fe83dddc3
-
SHA1
c104056f9a926d27a2082f0510c97b09cb0eb3e5
-
SHA256
0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d
-
SHA512
2b8e49ad84434dcaf98635120ac54bfa7e55bb61bf9d0e3f1f25ab81e950f638311d2121217bf5840834778d5e137551e24b89da02f12dc6be99d755c54f4c13
Static task
static1
Behavioral task
behavioral1
Sample
0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d.exe
Resource
win10-en-20211208
Malware Config
Extracted
C:\\README.5bede5a3.TXT
darkside
http://darksidfqzcuhtk2.onion/LYID3U99RAJSTEYEFWS6SLYDGMUXKNAT3OPKN9D56PIGX1QHBU5DHGUN4HGMX2IW
Targets
-
-
Target
0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d
-
Size
59KB
-
MD5
885fc8fb590b899c1db7b42fe83dddc3
-
SHA1
c104056f9a926d27a2082f0510c97b09cb0eb3e5
-
SHA256
0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d
-
SHA512
2b8e49ad84434dcaf98635120ac54bfa7e55bb61bf9d0e3f1f25ab81e950f638311d2121217bf5840834778d5e137551e24b89da02f12dc6be99d755c54f4c13
Score10/10-
DarkSide
Targeted ransomware first seen in August 2020. Operators steal data to use as leverage.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Sets desktop wallpaper using registry
-