General
-
Target
cd8db109a908e7f18b048afc89689790afb715f6d9097eae54f80a58ce22057e
-
Size
57KB
-
Sample
220201-br81lsfca7
-
MD5
b3297ec417511c2a4a24e378904d273c
-
SHA1
6a7caedc65bd2877f6823562700821d07294b2d7
-
SHA256
cd8db109a908e7f18b048afc89689790afb715f6d9097eae54f80a58ce22057e
-
SHA512
2f30750971538ab518a58359f23f4133cca28991635f36064eb36c167c05ac993bd9489b7fce71bc85450e56c971c1ce7b5699acb79cd9e60844dd0acc7ed3d5
Static task
static1
Behavioral task
behavioral1
Sample
cd8db109a908e7f18b048afc89689790afb715f6d9097eae54f80a58ce22057e.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
cd8db109a908e7f18b048afc89689790afb715f6d9097eae54f80a58ce22057e.dll
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\5B361F-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
cd8db109a908e7f18b048afc89689790afb715f6d9097eae54f80a58ce22057e
-
Size
57KB
-
MD5
b3297ec417511c2a4a24e378904d273c
-
SHA1
6a7caedc65bd2877f6823562700821d07294b2d7
-
SHA256
cd8db109a908e7f18b048afc89689790afb715f6d9097eae54f80a58ce22057e
-
SHA512
2f30750971538ab518a58359f23f4133cca28991635f36064eb36c167c05ac993bd9489b7fce71bc85450e56c971c1ce7b5699acb79cd9e60844dd0acc7ed3d5
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-