General
-
Target
bb00fd154b28cd6cc130cbaaabe3f92edcd5c674153f44734bad34009ddb94f6
-
Size
69KB
-
Sample
220201-bsa5zaefgq
-
MD5
e76a79e2d13f40bb0464b6d0168f5790
-
SHA1
cff4edd3f058214e820a3390f53353df0ccca814
-
SHA256
bb00fd154b28cd6cc130cbaaabe3f92edcd5c674153f44734bad34009ddb94f6
-
SHA512
d813e5f48d24fe6683d66e7b3d10e4b27c6e33e5420b764d9c0ce60e4217c17eb9f0f8ed666ddd835081bb29af18196eda6c9555b22ad5088d24e21554f90c9d
Static task
static1
Behavioral task
behavioral1
Sample
bb00fd154b28cd6cc130cbaaabe3f92edcd5c674153f44734bad34009ddb94f6.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
bb00fd154b28cd6cc130cbaaabe3f92edcd5c674153f44734bad34009ddb94f6.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\Program Files (x86)\Adobe\Acrobat Reader DC\0BF00D-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
bb00fd154b28cd6cc130cbaaabe3f92edcd5c674153f44734bad34009ddb94f6
-
Size
69KB
-
MD5
e76a79e2d13f40bb0464b6d0168f5790
-
SHA1
cff4edd3f058214e820a3390f53353df0ccca814
-
SHA256
bb00fd154b28cd6cc130cbaaabe3f92edcd5c674153f44734bad34009ddb94f6
-
SHA512
d813e5f48d24fe6683d66e7b3d10e4b27c6e33e5420b764d9c0ce60e4217c17eb9f0f8ed666ddd835081bb29af18196eda6c9555b22ad5088d24e21554f90c9d
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-