General
-
Target
b3a249a1e861a0080c3063d47219e8b658cc1720196a3e2e355a182f1f4c5db0
-
Size
57KB
-
Sample
220201-bsr4gsefhk
-
MD5
cba17f0fd5342568942d556fb9b2e18c
-
SHA1
a8a166c5acb05184ece45e511dd477c57be15f11
-
SHA256
b3a249a1e861a0080c3063d47219e8b658cc1720196a3e2e355a182f1f4c5db0
-
SHA512
f5d470b6c288f3bdeb5ef5fc95dd110c0630afc264ca862782898a005651b2c3acff3a30821fab480f78f3bdeede0149884d2353629e161cfcc28437378d5ba1
Static task
static1
Behavioral task
behavioral1
Sample
b3a249a1e861a0080c3063d47219e8b658cc1720196a3e2e355a182f1f4c5db0.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
b3a249a1e861a0080c3063d47219e8b658cc1720196a3e2e355a182f1f4c5db0.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\odt\8FDE0F-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
b3a249a1e861a0080c3063d47219e8b658cc1720196a3e2e355a182f1f4c5db0
-
Size
57KB
-
MD5
cba17f0fd5342568942d556fb9b2e18c
-
SHA1
a8a166c5acb05184ece45e511dd477c57be15f11
-
SHA256
b3a249a1e861a0080c3063d47219e8b658cc1720196a3e2e355a182f1f4c5db0
-
SHA512
f5d470b6c288f3bdeb5ef5fc95dd110c0630afc264ca862782898a005651b2c3acff3a30821fab480f78f3bdeede0149884d2353629e161cfcc28437378d5ba1
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-