Overview

overview

10

Static

static

10

9211217318...06.exe

windows7_x64

10

9211217318...06.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06

  • Size

    25.7MB

  • Sample

    220516-b82b4abedl

  • MD5

    a95111407437bd851ae651f847b53e90

  • SHA1

    1b45a51068c128fb97883a671c68cf17b02d2e29

  • SHA256

    9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06

  • SHA512

    18474827161b6e722db1b561171d96bc7d47e3e3f8a0e2bd416b540bdd8d8a3fe772ba7c24f3ad83a0aa3e45008d937a03ce0e0fb6786833da0397396b19cce7

Score
10/10
bazarbackdoordemonwarepyinstallerransomware

Malware Config

Targets

    • Target

      9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06

    • Size

      25.7MB

    • MD5

      a95111407437bd851ae651f847b53e90

    • SHA1

      1b45a51068c128fb97883a671c68cf17b02d2e29

    • SHA256

      9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06

    • SHA512

      18474827161b6e722db1b561171d96bc7d47e3e3f8a0e2bd416b540bdd8d8a3fe772ba7c24f3ad83a0aa3e45008d937a03ce0e0fb6786833da0397396b19cce7

    Score
    10/10
    demonwareransomware

    • DemonWare

      Ransomware first seen in mid-2020.

      ransomwaredemonware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks