General
-
Target
7a84d10ac55622cdac25f52170459ae5b8181ee3fc345eb1b1dcbd958b344aa6
-
Size
1.1MB
-
Sample
220216-2tahyafcar
-
MD5
7c3e9a17f3657c090edddac72c4ef048
-
SHA1
f7300c7a32604d41f1d7d83989430a5f96cfbe4b
-
SHA256
7a84d10ac55622cdac25f52170459ae5b8181ee3fc345eb1b1dcbd958b344aa6
-
SHA512
686e5c5fdab16880a34bfad4d607ac722c382bbc368570c14efa2350bd517603fc8e48953796a608d01906517726007d8cbb5d1d8d249359c8706674f1480ca2
Static task
static1
Behavioral task
behavioral1
Sample
7a84d10ac55622cdac25f52170459ae5b8181ee3fc345eb1b1dcbd958b344aa6.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7a84d10ac55622cdac25f52170459ae5b8181ee3fc345eb1b1dcbd958b344aa6.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6d570cc87c8625d6
https://mazedecrypt.top/6d570cc87c8625d6
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c2b0cc85d28d4b2
https://mazedecrypt.top/6c2b0cc85d28d4b2
Targets
-
-
Target
7a84d10ac55622cdac25f52170459ae5b8181ee3fc345eb1b1dcbd958b344aa6
-
Size
1.1MB
-
MD5
7c3e9a17f3657c090edddac72c4ef048
-
SHA1
f7300c7a32604d41f1d7d83989430a5f96cfbe4b
-
SHA256
7a84d10ac55622cdac25f52170459ae5b8181ee3fc345eb1b1dcbd958b344aa6
-
SHA512
686e5c5fdab16880a34bfad4d607ac722c382bbc368570c14efa2350bd517603fc8e48953796a608d01906517726007d8cbb5d1d8d249359c8706674f1480ca2
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-