General
-
Target
0f4bd47212a084ed6f4c50adf86dae36a025ffc4dc90a827799f4c49d53de0fe
-
Size
593KB
-
Sample
220216-26kjnsebh5
-
MD5
f5816c4519f8c36983d8836314a1c8ce
-
SHA1
1e7e30fb999e000a9495137ff4222ffd95d04c95
-
SHA256
0f4bd47212a084ed6f4c50adf86dae36a025ffc4dc90a827799f4c49d53de0fe
-
SHA512
70072c6f2fd953d5c00bdad1de49928bf6db510b5354547735a079628ca82150cadc8ece62e453f80786d7930f69fcc4adfb9dbc10cfa5653d455c90557d0898
Static task
static1
Behavioral task
behavioral1
Sample
0f4bd47212a084ed6f4c50adf86dae36a025ffc4dc90a827799f4c49d53de0fe.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0f4bd47212a084ed6f4c50adf86dae36a025ffc4dc90a827799f4c49d53de0fe.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6d570cc8ed197b4a
https://mazedecrypt.top/6d570cc8ed197b4a
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c2b0cc8492fd55d
https://mazedecrypt.top/6c2b0cc8492fd55d
Targets
-
-
Target
0f4bd47212a084ed6f4c50adf86dae36a025ffc4dc90a827799f4c49d53de0fe
-
Size
593KB
-
MD5
f5816c4519f8c36983d8836314a1c8ce
-
SHA1
1e7e30fb999e000a9495137ff4222ffd95d04c95
-
SHA256
0f4bd47212a084ed6f4c50adf86dae36a025ffc4dc90a827799f4c49d53de0fe
-
SHA512
70072c6f2fd953d5c00bdad1de49928bf6db510b5354547735a079628ca82150cadc8ece62e453f80786d7930f69fcc4adfb9dbc10cfa5653d455c90557d0898
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-