General
-
Target
1dea453e5344898c9a66309bd6d1cf6e21c56eb1427c026aac84b14a6b23f7fc.bin
-
Size
217KB
-
Sample
220225-29pb2ahch4
-
MD5
8ae1c827f37b6ea738ca730c40206d1e
-
SHA1
9980df439a7beef3c6b76b045d00776433e9d8c3
-
SHA256
1dea453e5344898c9a66309bd6d1cf6e21c56eb1427c026aac84b14a6b23f7fc
-
SHA512
b7d4d1fe46627a1dc2bd6ef3fbc1eed70e024a3b090b50e510f8420ac1f14f432790ba7c43b339ce3cbd06ecde27e1021ba0a4a2dfe54716fa512ccba6860d51
Static task
static1
Behavioral task
behavioral1
Sample
1dea453e5344898c9a66309bd6d1cf6e21c56eb1427c026aac84b14a6b23f7fc.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1dea453e5344898c9a66309bd6d1cf6e21c56eb1427c026aac84b14a6b23f7fc.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\readme.txt
conti
http://contirec7nchr45rx6ympez5rjldibnqzh7lsa56lvjvaeywhvoj3wad.onion/mdD5g9xlQVi7XsUVCNFnTrWhFh34BEttZD6hjWLAos8kAmDTh3rbwb8OjIhZXSSu
Targets
-
-
Target
1dea453e5344898c9a66309bd6d1cf6e21c56eb1427c026aac84b14a6b23f7fc.bin
-
Size
217KB
-
MD5
8ae1c827f37b6ea738ca730c40206d1e
-
SHA1
9980df439a7beef3c6b76b045d00776433e9d8c3
-
SHA256
1dea453e5344898c9a66309bd6d1cf6e21c56eb1427c026aac84b14a6b23f7fc
-
SHA512
b7d4d1fe46627a1dc2bd6ef3fbc1eed70e024a3b090b50e510f8420ac1f14f432790ba7c43b339ce3cbd06ecde27e1021ba0a4a2dfe54716fa512ccba6860d51
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Drops desktop.ini file(s)
-