General
-
Target
8830c4cf376ebbc98783dfeaf19d1d161546da236175f4d225fca940e11494b1
-
Size
601KB
-
Sample
220216-2rzp2seaa9
-
MD5
9a5ada52693122640e5f405202f3be19
-
SHA1
59377926431ca2fda7a25d5f96323d26b9790b3f
-
SHA256
8830c4cf376ebbc98783dfeaf19d1d161546da236175f4d225fca940e11494b1
-
SHA512
4a32d2d5668612c05921604259f0e90327ba85310ff73faa6518251c738570e9c1252edc24d2db7c5a939c689be0b399431507fe69497dfa19063f7d2ce9f5e4
Static task
static1
Behavioral task
behavioral1
Sample
8830c4cf376ebbc98783dfeaf19d1d161546da236175f4d225fca940e11494b1.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
8830c4cf376ebbc98783dfeaf19d1d161546da236175f4d225fca940e11494b1.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6d570cc8306be582
https://mazedecrypt.top/6d570cc8306be582
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c2b0cc89fdf649a
https://mazedecrypt.top/6c2b0cc89fdf649a
Targets
-
-
Target
8830c4cf376ebbc98783dfeaf19d1d161546da236175f4d225fca940e11494b1
-
Size
601KB
-
MD5
9a5ada52693122640e5f405202f3be19
-
SHA1
59377926431ca2fda7a25d5f96323d26b9790b3f
-
SHA256
8830c4cf376ebbc98783dfeaf19d1d161546da236175f4d225fca940e11494b1
-
SHA512
4a32d2d5668612c05921604259f0e90327ba85310ff73faa6518251c738570e9c1252edc24d2db7c5a939c689be0b399431507fe69497dfa19063f7d2ce9f5e4
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-