Resubmissions

04/11/2026, 16:57

261104-vgfqvsys7k10

01/02/2022, 08:40

220201-kk2sdsbfan10

General

  • Target
    007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
  • Size 728KB
  • Sample220201-kk2sdsbfan
  • SHA256 007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
  • MD5 SHA1 SHA512

Malware Config

Extracted

Path
  • C:\__________WHY FILES NOT WORK__________.txt

Ransom Note
  • Attention! Your network has been compromised and all of your files has been encrytped by "Hydra Ransomware" team! We used nextgen strong cryptography in order to encrypt your files. The only way to restore your files is to buy decryptor! * You must know the worst thing is happened now and you cannot hide our successful attack! Understand if payment is not made on time. All your company data will be permanently destroyed. Your backups has been fatal and it is just a waste of your precious time if going to try them! * IF YOU UNDERSTAND THE SITUATION, FOLLOW THE RECOVERY INSTRUCTIONS BELOW 1. Copy your Network ID and send to our email. Network ID : DM5V6T52K4 Email : [email protected] 2. You will receive a amount and payment order. 3. We will send you decryptor with private key to recovery your files. * You can ask for 1 free file decryption as proof of work in the first correspondence! * Your time for save your files has limited to one week (from first impact) before we delete our temporary email address! * Data manipulation cause permanent loss of files!

Targets

    • Target
      007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
    • Size 728KB
    • SHA256 007b5f204f5adfa631bab173a413a849da6d36cb198e9112777facdd090258f2
    • MD5 SHA1 SHA512
    Score
    10/10
    • Sets service image path in registry

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks