General
-
Target
52c356000529ec0927939a7374457f4386533efede771d71af737cad253369d8
-
Size
196KB
-
Sample
220215-ynfwzsheh8
-
MD5
7a03546f4bc1cd8ac7ec45091879610c
-
SHA1
6255d56e65319e4b04b53665792ed3b73e27e3a6
-
SHA256
52c356000529ec0927939a7374457f4386533efede771d71af737cad253369d8
-
SHA512
95dccdecca9893cd4f2773b79d662292b8034ce8154177b44dfcbefa4026fcfcc5fc2105ebd7743e5c5ac9e0b26eb915394487e9b10dac32398ce4920d30a231
Static task
static1
Behavioral task
behavioral1
Sample
52c356000529ec0927939a7374457f4386533efede771d71af737cad253369d8.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
52c356000529ec0927939a7374457f4386533efede771d71af737cad253369d8.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\readme.txt
conti
http://contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion/
https://contirecovery.xyz/
Targets
-
-
Target
52c356000529ec0927939a7374457f4386533efede771d71af737cad253369d8
-
Size
196KB
-
MD5
7a03546f4bc1cd8ac7ec45091879610c
-
SHA1
6255d56e65319e4b04b53665792ed3b73e27e3a6
-
SHA256
52c356000529ec0927939a7374457f4386533efede771d71af737cad253369d8
-
SHA512
95dccdecca9893cd4f2773b79d662292b8034ce8154177b44dfcbefa4026fcfcc5fc2105ebd7743e5c5ac9e0b26eb915394487e9b10dac32398ce4920d30a231
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-