General
-
Target
TTT.bin
-
Size
1.1MB
-
Sample
220402-rveh6sfac4
-
MD5
f14c088aa22eb7aaaf02dcbe3681ee83
-
SHA1
fe4e63f968354129529e167a9c66f060f3bc26f8
-
SHA256
08f2cce77ba2016baf5819ebe697207af6d78262db0d07dc8158b9f37924816d
-
SHA512
f3815176206f4525c4eab80ec1d33821cd35ed55fee686622cf0c33381deeeec6b76ffede4846b083be7cb4313d1ceafbe8cc3d5f5941fa2dd46df9dfe441572
Static task
static1
Behavioral task
behavioral1
Sample
TTT.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
TTT.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\readme.txt
conti
http://contirec7nchr45rx6ympez5rjldibnqzh7lsa56lvjvaeywhvoj3wad.onion/QuoGxV1WEF4BLFn6Fflq21CUpjFlFfejO6ulWG1yqnlJ4CqThu7m3ntnYwcFY3R9
Targets
-
-
Target
TTT.bin
-
Size
1.1MB
-
MD5
f14c088aa22eb7aaaf02dcbe3681ee83
-
SHA1
fe4e63f968354129529e167a9c66f060f3bc26f8
-
SHA256
08f2cce77ba2016baf5819ebe697207af6d78262db0d07dc8158b9f37924816d
-
SHA512
f3815176206f4525c4eab80ec1d33821cd35ed55fee686622cf0c33381deeeec6b76ffede4846b083be7cb4313d1ceafbe8cc3d5f5941fa2dd46df9dfe441572
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-