General
-
Target
78fb8d34cf3e034fbbaefd8f7587bd364a000a1e12c4a6fa45e192d56b93a25a
-
Size
364KB
-
Sample
220216-2tpmvsfcbl
-
MD5
57e3d794b333f6ba4d2a968a54c7f7d8
-
SHA1
e850e2963deaea7e6d43c1390f4d69b20ed62a67
-
SHA256
78fb8d34cf3e034fbbaefd8f7587bd364a000a1e12c4a6fa45e192d56b93a25a
-
SHA512
427820fb45cfd1a95e37fd36da5c48917547eb6c1ed727f3d9dbaec337cc2ad43d74e4d043fb603a078e42205822bf1055fa1c04707845ceeced5ef03f30127f
Static task
static1
Behavioral task
behavioral1
Sample
78fb8d34cf3e034fbbaefd8f7587bd364a000a1e12c4a6fa45e192d56b93a25a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
78fb8d34cf3e034fbbaefd8f7587bd364a000a1e12c4a6fa45e192d56b93a25a.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c610cc59aff5ff4
https://mazedecrypt.top/6c610cc59aff5ff4
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6b850caff28fc0aa
https://mazedecrypt.top/6b850caff28fc0aa
Targets
-
-
Target
78fb8d34cf3e034fbbaefd8f7587bd364a000a1e12c4a6fa45e192d56b93a25a
-
Size
364KB
-
MD5
57e3d794b333f6ba4d2a968a54c7f7d8
-
SHA1
e850e2963deaea7e6d43c1390f4d69b20ed62a67
-
SHA256
78fb8d34cf3e034fbbaefd8f7587bd364a000a1e12c4a6fa45e192d56b93a25a
-
SHA512
427820fb45cfd1a95e37fd36da5c48917547eb6c1ed727f3d9dbaec337cc2ad43d74e4d043fb603a078e42205822bf1055fa1c04707845ceeced5ef03f30127f
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-