General
-
Target
0681c37cfbb640a08028c3ba49e92dc82268f8ad2aa865b86efafc834ade3682
-
Size
903KB
-
Sample
220520-qwqgdsebg7
-
MD5
55e24e49a28d1c65ef535778982d0854
-
SHA1
368b76cfca253c01675533f1a9ba4756eab239b1
-
SHA256
0681c37cfbb640a08028c3ba49e92dc82268f8ad2aa865b86efafc834ade3682
-
SHA512
6aecf6a9a90083d8599da9fc1c68d9783942b6819739ceb8f03a4df58f20a92addba17561969b0e85d2243a33eceb2b28ca9571c782abc746e7f298734577067
Static task
static1
Behavioral task
behavioral1
Sample
0681c37cfbb640a08028c3ba49e92dc82268f8ad2aa865b86efafc834ade3682.ps1
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0681c37cfbb640a08028c3ba49e92dc82268f8ad2aa865b86efafc834ade3682.ps1
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\odt\03F6C2-Readme.txt
netwalker
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Targets
-
-
Target
0681c37cfbb640a08028c3ba49e92dc82268f8ad2aa865b86efafc834ade3682
-
Size
903KB
-
MD5
55e24e49a28d1c65ef535778982d0854
-
SHA1
368b76cfca253c01675533f1a9ba4756eab239b1
-
SHA256
0681c37cfbb640a08028c3ba49e92dc82268f8ad2aa865b86efafc834ade3682
-
SHA512
6aecf6a9a90083d8599da9fc1c68d9783942b6819739ceb8f03a4df58f20a92addba17561969b0e85d2243a33eceb2b28ca9571c782abc746e7f298734577067
Score10/10-
Netwalker Ransomware
Ransomware family with multiple versions. Also known as MailTo.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-