General
- Target 007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
- Size 728KB
- Sample220201-kk2sdsbfan
- SHA256 007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
- MD5 3867aff469391fba964309a4ba7a8ca2
- SHA1 e2a224ef5764f4b34b51abbc0ada10ea1d0dc0a9
- SHA512 73b56d1c9301dc9f385b99653c059c418ca633d51282affdad72be34d2b68022612ead62207cce353cb79304b5e48d79ae609264522519bb8efe38f2bf7f0b8a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2.exe
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Extracted
Path
-
C:\__________WHY FILES NOT WORK__________.txt
Ransom Note
- Attention! Your network has been compromised and all of your files has been encrytped by "Hydra Ransomware" team! We used nextgen strong cryptography in order to encrypt your files. The only way to restore your files is to buy decryptor! * You must know the worst thing is happened now and you cannot hide our successful attack! Understand if payment is not made on time. All your company data will be permanently destroyed. Your backups has been fatal and it is just a waste of your precious time if going to try them! * IF YOU UNDERSTAND THE SITUATION, FOLLOW THE RECOVERY INSTRUCTIONS BELOW 1. Copy your Network ID and send to our email. Network ID : DM5V6T52K4 Email : [email protected] 2. You will receive a amount and payment order. 3. We will send you decryptor with private key to recovery your files. * You can ask for 1 free file decryption as proof of work in the first correspondence! * Your time for save your files has limited to one week (from first impact) before we delete our temporary email address! * Data manipulation cause permanent loss of files!
Emails
Targets
-
- Target 007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
- Size 728KB
- SHA256 007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
- MD5 3867aff469391fba964309a4ba7a8ca2
- SHA1 e2a224ef5764f4b34b51abbc0ada10ea1d0dc0a9
- SHA512 73b56d1c9301dc9f385b99653c059c418ca633d51282affdad72be34d2b68022612ead62207cce353cb79304b5e48d79ae609264522519bb8efe38f2bf7f0b8a
- MD5 SHA1 SHA512
Score10/10-
Sets service image path in registry
-
Deletes itself