General
-
Target
ae2f99e7858ba084520795e0ac40f7f511b9242f5079069ed359934f523b4f79
-
Size
69KB
-
Sample
220201-bsy7ssfcb5
-
MD5
fead7dc34c78049f8c85151f3596f732
-
SHA1
57ca011a891619aa2c10058f0c03d38e36247dcc
-
SHA256
ae2f99e7858ba084520795e0ac40f7f511b9242f5079069ed359934f523b4f79
-
SHA512
df1d70b3b3db9307a66d24c1850fc2ad685f391d0d6ddc8d604e6fbe4740c97d8d220fab705513236b81c5c93c0ce142b1e9c36898ee07a7bdd279136425171b
Static task
static1
Behavioral task
behavioral1
Sample
ae2f99e7858ba084520795e0ac40f7f511b9242f5079069ed359934f523b4f79.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
ae2f99e7858ba084520795e0ac40f7f511b9242f5079069ed359934f523b4f79.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\Recovery\bb8f4342-587c-11ec-ba95-d612cd5803e9\0A7439-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
ae2f99e7858ba084520795e0ac40f7f511b9242f5079069ed359934f523b4f79
-
Size
69KB
-
MD5
fead7dc34c78049f8c85151f3596f732
-
SHA1
57ca011a891619aa2c10058f0c03d38e36247dcc
-
SHA256
ae2f99e7858ba084520795e0ac40f7f511b9242f5079069ed359934f523b4f79
-
SHA512
df1d70b3b3db9307a66d24c1850fc2ad685f391d0d6ddc8d604e6fbe4740c97d8d220fab705513236b81c5c93c0ce142b1e9c36898ee07a7bdd279136425171b
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-