General
-
Target
7656d6519e0305bd95d4228387ffcd7b419ed7ede733b077755d1773f24302b1
-
Size
1.1MB
-
Sample
220216-2t2mesead5
-
MD5
36933b29eb2ebb358f7cb7dde4909d11
-
SHA1
99d84cdea97acb6b28fba07817246d901f26322a
-
SHA256
7656d6519e0305bd95d4228387ffcd7b419ed7ede733b077755d1773f24302b1
-
SHA512
72341cb8599c11c9f27cf1d2174e52f9c8de69d59885d0521b39267a9b03441dea657c07e090d80f7dae59eebfe35dd1e9715f067ae10d4281f060fc1bc8da3f
Static task
static1
Behavioral task
behavioral1
Sample
7656d6519e0305bd95d4228387ffcd7b419ed7ede733b077755d1773f24302b1.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7656d6519e0305bd95d4228387ffcd7b419ed7ede733b077755d1773f24302b1.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c610cc5e8b1124a
https://mazedecrypt.top/6c610cc5e8b1124a
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c2b0cc8e62b0e
https://mazedecrypt.top/6c2b0cc8e62b0e
Targets
-
-
Target
7656d6519e0305bd95d4228387ffcd7b419ed7ede733b077755d1773f24302b1
-
Size
1.1MB
-
MD5
36933b29eb2ebb358f7cb7dde4909d11
-
SHA1
99d84cdea97acb6b28fba07817246d901f26322a
-
SHA256
7656d6519e0305bd95d4228387ffcd7b419ed7ede733b077755d1773f24302b1
-
SHA512
72341cb8599c11c9f27cf1d2174e52f9c8de69d59885d0521b39267a9b03441dea657c07e090d80f7dae59eebfe35dd1e9715f067ae10d4281f060fc1bc8da3f
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-