General
-
Target
6691bd27f6ef971d61a34797ab47414635a98fe531d469134dbefed18bb42956
-
Size
69KB
-
Sample
220201-bwr8nafce4
-
MD5
13c1aeaccf79909d672f531e432e22d8
-
SHA1
1e7f926253ac6fdbea18cdbe44c88fe0e8290969
-
SHA256
6691bd27f6ef971d61a34797ab47414635a98fe531d469134dbefed18bb42956
-
SHA512
b262dcd0670666e90a0d6f0e1b2138eb850885eecd5c7057369f9001c157e6b99c5654e1559c9c81a53310c7e7699cf0bd43f812545b5dd50e2574cd8738ff02
Static task
static1
Behavioral task
behavioral1
Sample
6691bd27f6ef971d61a34797ab47414635a98fe531d469134dbefed18bb42956.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
6691bd27f6ef971d61a34797ab47414635a98fe531d469134dbefed18bb42956.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\Users\Admin\Favorites\A0C284-Readme.txt
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
6691bd27f6ef971d61a34797ab47414635a98fe531d469134dbefed18bb42956
-
Size
69KB
-
MD5
13c1aeaccf79909d672f531e432e22d8
-
SHA1
1e7f926253ac6fdbea18cdbe44c88fe0e8290969
-
SHA256
6691bd27f6ef971d61a34797ab47414635a98fe531d469134dbefed18bb42956
-
SHA512
b262dcd0670666e90a0d6f0e1b2138eb850885eecd5c7057369f9001c157e6b99c5654e1559c9c81a53310c7e7699cf0bd43f812545b5dd50e2574cd8738ff02
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-