General
-
Target
be15c80ff19aa41daab5e811eb5daabf6eb01471ae915e0642bf04f481a7f55b
-
Size
704KB
-
Sample
220216-2l2x8adhe5
-
MD5
19b4618578d7c17d52737dd99218e670
-
SHA1
62eb42aa419ff51412f2260482a7803542fe5390
-
SHA256
be15c80ff19aa41daab5e811eb5daabf6eb01471ae915e0642bf04f481a7f55b
-
SHA512
591d6de41fb9a39d4f8f16746287ae52fbc476fe53d7e282954651fc383caf47d606864af07afbf4058524c540c762b6fb8b296d3297ac47dbefb08b7d5c403a
Static task
static1
Behavioral task
behavioral1
Sample
be15c80ff19aa41daab5e811eb5daabf6eb01471ae915e0642bf04f481a7f55b.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
be15c80ff19aa41daab5e811eb5daabf6eb01471ae915e0642bf04f481a7f55b.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c610cc5b457dc49
https://mazedecrypt.top/6c610cc5b457dc49
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c2b0cc864c0e078
https://mazedecrypt.top/6c2b0cc864c0e078
Targets
-
-
Target
be15c80ff19aa41daab5e811eb5daabf6eb01471ae915e0642bf04f481a7f55b
-
Size
704KB
-
MD5
19b4618578d7c17d52737dd99218e670
-
SHA1
62eb42aa419ff51412f2260482a7803542fe5390
-
SHA256
be15c80ff19aa41daab5e811eb5daabf6eb01471ae915e0642bf04f481a7f55b
-
SHA512
591d6de41fb9a39d4f8f16746287ae52fbc476fe53d7e282954651fc383caf47d606864af07afbf4058524c540c762b6fb8b296d3297ac47dbefb08b7d5c403a
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-