General
-
Target
75e6ef66914b9e180f649e42055de192163266c84072562a74eddda03437f4ac
-
Size
52KB
-
Sample
220211-hkstdabhh6
-
MD5
6a1eb94548ad075353d7e55826ad15a4
-
SHA1
7719bc9194ddbfb1a496e8a15827592a5e371a14
-
SHA256
75e6ef66914b9e180f649e42055de192163266c84072562a74eddda03437f4ac
-
SHA512
37da482e3c71ee824c10f05d4d25ad6120e99dbf614c311c1743c108b5cce61da376709938fc1fe0cfed726568e6d071b64ffec5c22247a66dda170a4fcda9f2
Static task
static1
Behavioral task
behavioral1
Sample
75e6ef66914b9e180f649e42055de192163266c84072562a74eddda03437f4ac.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
75e6ef66914b9e180f649e42055de192163266c84072562a74eddda03437f4ac.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\instructions.html
Extracted
C:\instructions.html
Targets
-
-
Target
75e6ef66914b9e180f649e42055de192163266c84072562a74eddda03437f4ac
-
Size
52KB
-
MD5
6a1eb94548ad075353d7e55826ad15a4
-
SHA1
7719bc9194ddbfb1a496e8a15827592a5e371a14
-
SHA256
75e6ef66914b9e180f649e42055de192163266c84072562a74eddda03437f4ac
-
SHA512
37da482e3c71ee824c10f05d4d25ad6120e99dbf614c311c1743c108b5cce61da376709938fc1fe0cfed726568e6d071b64ffec5c22247a66dda170a4fcda9f2
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-