General
-
Target
55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
-
Size
69KB
-
Sample
220201-bxjmxaegen
-
MD5
a2de690489ee5d8b3cd06fdea0a63670
-
SHA1
5f94ad2d365ae9c233b3f9ef68470c03e45aba64
-
SHA256
55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
-
SHA512
0fb16a63055cc5cd13464ce3d414f7efe8c41abe4da98614629d2af2116ea9f2742edaaf7ca77ef33a26b8e0552e9bc149edbec7029b87c24fb77cd2d674a476
Static task
static1
Behavioral task
behavioral1
Sample
55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\Users\Admin\Desktop\BAA3E3-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
-
Size
69KB
-
MD5
a2de690489ee5d8b3cd06fdea0a63670
-
SHA1
5f94ad2d365ae9c233b3f9ef68470c03e45aba64
-
SHA256
55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
-
SHA512
0fb16a63055cc5cd13464ce3d414f7efe8c41abe4da98614629d2af2116ea9f2742edaaf7ca77ef33a26b8e0552e9bc149edbec7029b87c24fb77cd2d674a476
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-