General
-
Target
03dd22c542d2555bf0650df2434079d314e5d311762d778b612f03327b2058e8
-
Size
5.1MB
-
Sample
220201-b11qlafdb5
-
MD5
ee48f5cc6e8e953361db80dcf1c30445
-
SHA1
c400de9be89e17b57532ec003e404941f95e358b
-
SHA256
03dd22c542d2555bf0650df2434079d314e5d311762d778b612f03327b2058e8
-
SHA512
47bc33530d37dfcca2169257afe4a743823dec4d096373063f6279f3989af08759b43f83c567a13f5658ac58c9d924a26439dffb8cec63130190324741dc68fe
Static task
static1
Behavioral task
behavioral1
Sample
03dd22c542d2555bf0650df2434079d314e5d311762d778b612f03327b2058e8.ps1
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
03dd22c542d2555bf0650df2434079d314e5d311762d778b612f03327b2058e8.ps1
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\1D1F10-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
03dd22c542d2555bf0650df2434079d314e5d311762d778b612f03327b2058e8
-
Size
5.1MB
-
MD5
ee48f5cc6e8e953361db80dcf1c30445
-
SHA1
c400de9be89e17b57532ec003e404941f95e358b
-
SHA256
03dd22c542d2555bf0650df2434079d314e5d311762d778b612f03327b2058e8
-
SHA512
47bc33530d37dfcca2169257afe4a743823dec4d096373063f6279f3989af08759b43f83c567a13f5658ac58c9d924a26439dffb8cec63130190324741dc68fe
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies Installed Components in the registry
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-