General
-
Target
71768f2099e7c880dfd25b5e20df9424d0967689abe6fd7cf4896941b8977cb0
-
Size
908KB
-
Sample
220520-qwnykaebg5
-
MD5
8f4a5516d10a163ec1421fdf39fba854
-
SHA1
c6c78a6af1ae01c1aa60f4e601fb97cdf7dcaa75
-
SHA256
71768f2099e7c880dfd25b5e20df9424d0967689abe6fd7cf4896941b8977cb0
-
SHA512
ac287b080b5b8683018da99840cb5e09267d57055da3edf54ee9d3b4a62d9c3c8c467c8e39aa1b9c48faf88fac821c1e59c139f1342282f113653cd30d9074a8
Static task
static1
Behavioral task
behavioral1
Sample
71768f2099e7c880dfd25b5e20df9424d0967689abe6fd7cf4896941b8977cb0.ps1
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
71768f2099e7c880dfd25b5e20df9424d0967689abe6fd7cf4896941b8977cb0.ps1
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\odt\5C93B1-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
71768f2099e7c880dfd25b5e20df9424d0967689abe6fd7cf4896941b8977cb0
-
Size
908KB
-
MD5
8f4a5516d10a163ec1421fdf39fba854
-
SHA1
c6c78a6af1ae01c1aa60f4e601fb97cdf7dcaa75
-
SHA256
71768f2099e7c880dfd25b5e20df9424d0967689abe6fd7cf4896941b8977cb0
-
SHA512
ac287b080b5b8683018da99840cb5e09267d57055da3edf54ee9d3b4a62d9c3c8c467c8e39aa1b9c48faf88fac821c1e59c139f1342282f113653cd30d9074a8
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-