General
-
Target
51f987ca424efa1e278fef26c8b7f26ba44ea7aa2d19f5b4dae1d9818877fe74
-
Size
594KB
-
Sample
220216-2yxt2afceq
-
MD5
6af23009c00136a035654607fd423a24
-
SHA1
5375aa02c6dab85ece057a2e0d3603fc02f04f52
-
SHA256
51f987ca424efa1e278fef26c8b7f26ba44ea7aa2d19f5b4dae1d9818877fe74
-
SHA512
ed82a43c12c459bf3cf09b03d4db7399a76c7bcfc16f88eea334f4db1ec2768664900cb6a4c92e659112e7bd126ebf35eed32beb66f20c5d201ede1d4946b3db
Static task
static1
Behavioral task
behavioral1
Sample
51f987ca424efa1e278fef26c8b7f26ba44ea7aa2d19f5b4dae1d9818877fe74.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
51f987ca424efa1e278fef26c8b7f26ba44ea7aa2d19f5b4dae1d9818877fe74.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c610cc5b1136db8
https://mazedecrypt.top/6c610cc5b1136db8
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c2b0cc8b45c5c18
https://mazedecrypt.top/6c2b0cc8b45c5c18
Targets
-
-
Target
51f987ca424efa1e278fef26c8b7f26ba44ea7aa2d19f5b4dae1d9818877fe74
-
Size
594KB
-
MD5
6af23009c00136a035654607fd423a24
-
SHA1
5375aa02c6dab85ece057a2e0d3603fc02f04f52
-
SHA256
51f987ca424efa1e278fef26c8b7f26ba44ea7aa2d19f5b4dae1d9818877fe74
-
SHA512
ed82a43c12c459bf3cf09b03d4db7399a76c7bcfc16f88eea334f4db1ec2768664900cb6a4c92e659112e7bd126ebf35eed32beb66f20c5d201ede1d4946b3db
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-