General
-
Target
7fdb70fea41b556d580d18971407c80cd65b011960327d3ac956fdf80c203e52
-
Size
65KB
-
Sample
220201-bv3yrsfcd8
-
MD5
dcd6d92285f7b1a6172090612e75b1f3
-
SHA1
cbae0034740d30f7c2085d5c9332d127c140b5a0
-
SHA256
7fdb70fea41b556d580d18971407c80cd65b011960327d3ac956fdf80c203e52
-
SHA512
fce0c7f4efb845cac33eac482e93652887d4015457c86533ebe773614489966b85d29b529ad34bda4917471f2c77dddbdc554c7ba0480b2798c88b13a9876039
Static task
static1
Behavioral task
behavioral1
Sample
7fdb70fea41b556d580d18971407c80cd65b011960327d3ac956fdf80c203e52.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7fdb70fea41b556d580d18971407c80cd65b011960327d3ac956fdf80c203e52.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\A650DC-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
7fdb70fea41b556d580d18971407c80cd65b011960327d3ac956fdf80c203e52
-
Size
65KB
-
MD5
dcd6d92285f7b1a6172090612e75b1f3
-
SHA1
cbae0034740d30f7c2085d5c9332d127c140b5a0
-
SHA256
7fdb70fea41b556d580d18971407c80cd65b011960327d3ac956fdf80c203e52
-
SHA512
fce0c7f4efb845cac33eac482e93652887d4015457c86533ebe773614489966b85d29b529ad34bda4917471f2c77dddbdc554c7ba0480b2798c88b13a9876039
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-