General
-
Target
5ae06a8d117e876476832245039715825fbfbefc0d2463ab6c30295dd1d4afa6
-
Size
911KB
-
Sample
220201-bw94gaegej
-
MD5
0d890fc8e761b764ba3a04af07197e20
-
SHA1
21c0ed7abaafbfd14c777aa370f397e4351654a6
-
SHA256
5ae06a8d117e876476832245039715825fbfbefc0d2463ab6c30295dd1d4afa6
-
SHA512
87416be9fb11ef9d9eacc9df822e0f31f7d6908688972cabe9824599c34420c1e8cae2d7eca278dbba2acb4341761db810504d414438aa5c4631950bb1afcd64
Static task
static1
Behavioral task
behavioral1
Sample
5ae06a8d117e876476832245039715825fbfbefc0d2463ab6c30295dd1d4afa6.ps1
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
5ae06a8d117e876476832245039715825fbfbefc0d2463ab6c30295dd1d4afa6.ps1
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\odt\9FE4BF-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
5ae06a8d117e876476832245039715825fbfbefc0d2463ab6c30295dd1d4afa6
-
Size
911KB
-
MD5
0d890fc8e761b764ba3a04af07197e20
-
SHA1
21c0ed7abaafbfd14c777aa370f397e4351654a6
-
SHA256
5ae06a8d117e876476832245039715825fbfbefc0d2463ab6c30295dd1d4afa6
-
SHA512
87416be9fb11ef9d9eacc9df822e0f31f7d6908688972cabe9824599c34420c1e8cae2d7eca278dbba2acb4341761db810504d414438aa5c4631950bb1afcd64
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-