General
-
Target
b62c47fe08cdb67d2a9754ea95ce87aeb7bfb6a7fd0ae10e919494d4bbd234a0
-
Size
423KB
-
Sample
220216-2mr5eadhf4
-
MD5
524ca5feca6bd4ef511ca5c126cf5e73
-
SHA1
aff9e5a6a17e0347f975b454b0dbf230715a46d3
-
SHA256
b62c47fe08cdb67d2a9754ea95ce87aeb7bfb6a7fd0ae10e919494d4bbd234a0
-
SHA512
73a8a41e930ac098117a472c37bff7fb541bcaabdcab066956c733b7206bc7e8be1725a7ff508956b3f36a725ffa6d0d14fd0eef5c138e600cf915946e5dac68
Static task
static1
Behavioral task
behavioral1
Sample
b62c47fe08cdb67d2a9754ea95ce87aeb7bfb6a7fd0ae10e919494d4bbd234a0.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
b62c47fe08cdb67d2a9754ea95ce87aeb7bfb6a7fd0ae10e919494d4bbd234a0.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/892e099c77f9f21d
https://mazedecrypt.top/892e099c77f9f21d
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/875c09836ad0eacb
https://mazedecrypt.top/875c09836ad0eacb
Targets
-
-
Target
b62c47fe08cdb67d2a9754ea95ce87aeb7bfb6a7fd0ae10e919494d4bbd234a0
-
Size
423KB
-
MD5
524ca5feca6bd4ef511ca5c126cf5e73
-
SHA1
aff9e5a6a17e0347f975b454b0dbf230715a46d3
-
SHA256
b62c47fe08cdb67d2a9754ea95ce87aeb7bfb6a7fd0ae10e919494d4bbd234a0
-
SHA512
73a8a41e930ac098117a472c37bff7fb541bcaabdcab066956c733b7206bc7e8be1725a7ff508956b3f36a725ffa6d0d14fd0eef5c138e600cf915946e5dac68
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-