General

  • Target

    1.bin

  • Size

    11.3MB

  • Sample

    220425-ncjtdsbhf5

  • MD5

    78177c46ae7665b94de672fcf0a26d8e

  • SHA1

    16dba40c098ad8ea3489c4f0e628a12686656ff8

  • SHA256

    63d6c419a8229bc7fc2089a2899d27bac746de0e96368e2a49d7c7754abd29f4

  • SHA512

    043a3e148203b011d035d427512e080260b1af1af52aedcb2ab9197a498a67023f2c4946c0f5ccb303a7b5e17d9f813584b6f8240dc089fe023038b58c6420fb

Malware Config

Targets

    • Target

      1.bin

    • Size

      11.3MB

    • MD5

      78177c46ae7665b94de672fcf0a26d8e

    • SHA1

      16dba40c098ad8ea3489c4f0e628a12686656ff8

    • SHA256

      63d6c419a8229bc7fc2089a2899d27bac746de0e96368e2a49d7c7754abd29f4

    • SHA512

      043a3e148203b011d035d427512e080260b1af1af52aedcb2ab9197a498a67023f2c4946c0f5ccb303a7b5e17d9f813584b6f8240dc089fe023038b58c6420fb

    Score
    10/10
    • DemonWare

      Ransomware first seen in mid-2020.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks