General
-
Target
8e0589b59866389754b78dd818f7b6727f532ef8834d99c0636cb7e0a5b3bdf5
-
Size
148KB
-
Sample
220201-bvs4kafcd2
-
MD5
72f9a9f3380f09f03b6b85a68dde79df
-
SHA1
89dbeae64eaf6e9ed6bde9b7cb927b58962dde59
-
SHA256
8e0589b59866389754b78dd818f7b6727f532ef8834d99c0636cb7e0a5b3bdf5
-
SHA512
09f55ce2afa4080befe8ee36d2d8fc0a4cbb60d80b273cf7f18a74c658263745ea06ffbfa7dd8a08d19e93412d48408b2545e3533f674a5612ccf83564d95a9d
Static task
static1
Behavioral task
behavioral1
Sample
8e0589b59866389754b78dd818f7b6727f532ef8834d99c0636cb7e0a5b3bdf5.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
8e0589b59866389754b78dd818f7b6727f532ef8834d99c0636cb7e0a5b3bdf5.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\Program Files\F90D05-Readme.txt
netwalker
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
8e0589b59866389754b78dd818f7b6727f532ef8834d99c0636cb7e0a5b3bdf5
-
Size
148KB
-
MD5
72f9a9f3380f09f03b6b85a68dde79df
-
SHA1
89dbeae64eaf6e9ed6bde9b7cb927b58962dde59
-
SHA256
8e0589b59866389754b78dd818f7b6727f532ef8834d99c0636cb7e0a5b3bdf5
-
SHA512
09f55ce2afa4080befe8ee36d2d8fc0a4cbb60d80b273cf7f18a74c658263745ea06ffbfa7dd8a08d19e93412d48408b2545e3533f674a5612ccf83564d95a9d
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-