General
-
Target
fa40090bd1639b1d57de4b64e730f9e6dfa5a5a8a64c34cb8f58628d728c46a2
-
Size
69KB
-
Sample
220201-bnm9qsefcp
-
MD5
8f27d7d22f29290ec4810f2b0cdd8b8e
-
SHA1
053cf2839756b45dbc8221cf6e2db67200002291
-
SHA256
fa40090bd1639b1d57de4b64e730f9e6dfa5a5a8a64c34cb8f58628d728c46a2
-
SHA512
9ed80bd9de244366d2f0e5d89e11d11e3c06c6b3a778e97cc7176fe95ef3a2da2808fbce5fb46686a24c99c79a9b21f2c5bbce72a48b2d59578b34de1ba3f3c5
Static task
static1
Behavioral task
behavioral1
Sample
fa40090bd1639b1d57de4b64e730f9e6dfa5a5a8a64c34cb8f58628d728c46a2.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
fa40090bd1639b1d57de4b64e730f9e6dfa5a5a8a64c34cb8f58628d728c46a2.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\Program Files\FC18EA-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
fa40090bd1639b1d57de4b64e730f9e6dfa5a5a8a64c34cb8f58628d728c46a2
-
Size
69KB
-
MD5
8f27d7d22f29290ec4810f2b0cdd8b8e
-
SHA1
053cf2839756b45dbc8221cf6e2db67200002291
-
SHA256
fa40090bd1639b1d57de4b64e730f9e6dfa5a5a8a64c34cb8f58628d728c46a2
-
SHA512
9ed80bd9de244366d2f0e5d89e11d11e3c06c6b3a778e97cc7176fe95ef3a2da2808fbce5fb46686a24c99c79a9b21f2c5bbce72a48b2d59578b34de1ba3f3c5
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-