General
-
Target
927492289f2c081dafcb2c0d741934cf9d4b76a9b5e739215f5d320bea112a8e
-
Size
684KB
-
Sample
220216-2q313sdhh9
-
MD5
1aaaf2ecd5cab040665d32d9f059e12f
-
SHA1
7b3cafb0bf5b50e6bbb5066d5a61609fd8f142a0
-
SHA256
927492289f2c081dafcb2c0d741934cf9d4b76a9b5e739215f5d320bea112a8e
-
SHA512
49720351aeb789a6efde02b95d943d710f08265521771322ba5e538110bee4c0c17c757631675ef9f37981aac74ec2ada287c88d438c48fda0415bb8cbcbdbdf
Static task
static1
Behavioral task
behavioral1
Sample
927492289f2c081dafcb2c0d741934cf9d4b76a9b5e739215f5d320bea112a8e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
927492289f2c081dafcb2c0d741934cf9d4b76a9b5e739215f5d320bea112a8e.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/892e099cceb2e1a0
https://mazedecrypt.top/892e099cceb2e1a0
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/8802099c22d5eff0
https://mazedecrypt.top/8802099c22d5eff0
Targets
-
-
Target
927492289f2c081dafcb2c0d741934cf9d4b76a9b5e739215f5d320bea112a8e
-
Size
684KB
-
MD5
1aaaf2ecd5cab040665d32d9f059e12f
-
SHA1
7b3cafb0bf5b50e6bbb5066d5a61609fd8f142a0
-
SHA256
927492289f2c081dafcb2c0d741934cf9d4b76a9b5e739215f5d320bea112a8e
-
SHA512
49720351aeb789a6efde02b95d943d710f08265521771322ba5e538110bee4c0c17c757631675ef9f37981aac74ec2ada287c88d438c48fda0415bb8cbcbdbdf
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-