General
-
Target
05c8aaae3fb6c9605f5c69f8eb73cc2c1f08bd72213492e24f221a2ef60508a3
-
Size
190KB
-
Sample
220215-yn7dyahfa3
-
MD5
5a28712d40414a60844ae5b702db9276
-
SHA1
860882cd36e56bb92ce8953e07ad8385a1e0b223
-
SHA256
05c8aaae3fb6c9605f5c69f8eb73cc2c1f08bd72213492e24f221a2ef60508a3
-
SHA512
4f58f8a81e956f275f80392b5ec31bafaad32e42ca4ca7f735dcc7f7cbf5683ced36ad15ccfe5b9584e7db0779f31062458cc7facc27bf1333ada0c11cc335fc
Static task
static1
Behavioral task
behavioral1
Sample
05c8aaae3fb6c9605f5c69f8eb73cc2c1f08bd72213492e24f221a2ef60508a3.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
05c8aaae3fb6c9605f5c69f8eb73cc2c1f08bd72213492e24f221a2ef60508a3.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\readme.txt
conti
http://contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion/
https://contirecovery.click
Targets
-
-
Target
05c8aaae3fb6c9605f5c69f8eb73cc2c1f08bd72213492e24f221a2ef60508a3
-
Size
190KB
-
MD5
5a28712d40414a60844ae5b702db9276
-
SHA1
860882cd36e56bb92ce8953e07ad8385a1e0b223
-
SHA256
05c8aaae3fb6c9605f5c69f8eb73cc2c1f08bd72213492e24f221a2ef60508a3
-
SHA512
4f58f8a81e956f275f80392b5ec31bafaad32e42ca4ca7f735dcc7f7cbf5683ced36ad15ccfe5b9584e7db0779f31062458cc7facc27bf1333ada0c11cc335fc
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-