General
-
Target
a3a9f63dd204bf2246f7e02efab378c9511ff7eff9c6277e8eb12cb6d1eb2f76
-
Size
190KB
-
Sample
220215-ymcsyaheg9
-
MD5
ca9fbde6ecdb85ed32339252e69c3943
-
SHA1
03423c9ac143406daabccae07a5842d71f96eb0d
-
SHA256
a3a9f63dd204bf2246f7e02efab378c9511ff7eff9c6277e8eb12cb6d1eb2f76
-
SHA512
e2195f1f497c7ac67005a1275f0ec841c3481c9dcdf00249607d2e57ef6756a052f62342eab0503763817f35787b97a264d4dee3b0c49eaa0fff6c5f27a0b9ff
Static task
static1
Behavioral task
behavioral1
Sample
3db6e8df73f12b6a9fa9adb6ad87b017d530a9d736909338042735ed00a9463b.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
3db6e8df73f12b6a9fa9adb6ad87b017d530a9d736909338042735ed00a9463b.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\readme.txt
conti
http://contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion/
https://contirecovery.click
Targets
-
-
Target
3db6e8df73f12b6a9fa9adb6ad87b017d530a9d736909338042735ed00a9463b.dll
-
Size
190KB
-
MD5
6a97f8afc1151619d5b119407faeb1ad
-
SHA1
185d65eb755cee888508d07adad60b39e0be2210
-
SHA256
3db6e8df73f12b6a9fa9adb6ad87b017d530a9d736909338042735ed00a9463b
-
SHA512
6e46da8df1ea210b8458f690b9b9951d02800190571a29ed71ac5f1d613bd77525cdf129a450c9bf155e4ca957a11ab5f254aeaa06b66faf62dcb36d2dfa94f1
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-