General
-
Target
416556c9f085ae56e13f32d7c8c99f03efc6974b2897070f46ef5f9736443e8e
-
Size
277KB
-
Sample
220201-bx4cbaegfj
-
MD5
d60d91c24570770af42816602ac19c97
-
SHA1
0d17845f19dc2fc1e38934864424c23d8bcc7644
-
SHA256
416556c9f085ae56e13f32d7c8c99f03efc6974b2897070f46ef5f9736443e8e
-
SHA512
b2fdac5145f9cfdfe06d10518198aadcb9a3d5bd26f9dcb9c8af5f3be8b1e4aa82895876ed24d39225510006d134cd31e3a588513e7ab9010cb8f9482958c7bc
Behavioral task
behavioral1
Sample
416556c9f085ae56e13f32d7c8c99f03efc6974b2897070f46ef5f9736443e8e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
416556c9f085ae56e13f32d7c8c99f03efc6974b2897070f46ef5f9736443e8e.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\E7AFD-Readme.txt
netwalker
Targets
-
-
Target
416556c9f085ae56e13f32d7c8c99f03efc6974b2897070f46ef5f9736443e8e
-
Size
277KB
-
MD5
d60d91c24570770af42816602ac19c97
-
SHA1
0d17845f19dc2fc1e38934864424c23d8bcc7644
-
SHA256
416556c9f085ae56e13f32d7c8c99f03efc6974b2897070f46ef5f9736443e8e
-
SHA512
b2fdac5145f9cfdfe06d10518198aadcb9a3d5bd26f9dcb9c8af5f3be8b1e4aa82895876ed24d39225510006d134cd31e3a588513e7ab9010cb8f9482958c7bc
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-