Analysis
-
max time kernel
143s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
18-06-2022 11:33
Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
2.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
2.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
1.exe
-
Size
299KB
-
MD5
5995ab21a51618aef0c7aef5b4d82f76
-
SHA1
55da88e2d5dee9134469ddc416b946cd97143c93
-
SHA256
a87536fa66b6840d22b702dd7450f79140e88794fd466ef0320ba3b664964baf
-
SHA512
b6ba33c85899e44a6706a6e2aed756ecff177c15840e4ea715ece45702da31f4aefaa68d560a859456a17d2cc76923049c452a4618c119cbc52d0d4da1126293
Score
8/10
Malware Config
Signatures
-
Modifies extensions of user files 6 IoCs
Ransomware generally changes the extension on encrypted files.
description ioc Process File opened for modification C:\Users\Admin\Pictures\InvokeJoin.tiff 1.exe File renamed C:\Users\Admin\Pictures\InvokeJoin.tiff => C:\Users\Admin\Pictures\InvokeJoin.tiff.nigger 1.exe File opened for modification C:\Users\Admin\Pictures\MoveBlock.tiff 1.exe File renamed C:\Users\Admin\Pictures\MoveBlock.tiff => C:\Users\Admin\Pictures\MoveBlock.tiff.nigger 1.exe File renamed C:\Users\Admin\Pictures\StopTest.raw => C:\Users\Admin\Pictures\StopTest.raw.nigger 1.exe File renamed C:\Users\Admin\Pictures\WaitPing.crw => C:\Users\Admin\Pictures\WaitPing.crw.nigger 1.exe -
Drops desktop.ini file(s) 35 IoCs
description ioc Process File created C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini 1.exe File created C:\Users\Public\Downloads\desktop.ini 1.exe File created C:\Users\Admin\Favorites\Links\desktop.ini 1.exe File created C:\Users\Admin\Pictures\Saved Pictures\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini 1.exe File created C:\Users\Public\desktop.ini 1.exe File created C:\Users\Public\AccountPictures\desktop.ini 1.exe File created C:\Users\Admin\Documents\desktop.ini 1.exe File created C:\Users\Admin\Links\desktop.ini 1.exe File created C:\Users\Public\Libraries\desktop.ini 1.exe File created C:\Users\Admin\Saved Games\desktop.ini 1.exe File created C:\Users\Admin\Videos\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini 1.exe File created C:\Users\Public\Desktop\desktop.ini 1.exe File created C:\Users\Public\Documents\desktop.ini 1.exe File created C:\Users\Admin\Music\desktop.ini 1.exe File created C:\Users\Admin\Pictures\Camera Roll\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini 1.exe File created C:\Users\Public\Music\desktop.ini 1.exe File created C:\Users\Public\Pictures\desktop.ini 1.exe File created C:\Users\Admin\3D Objects\desktop.ini 1.exe File created C:\Users\Admin\Contacts\desktop.ini 1.exe File created C:\Users\Admin\Desktop\desktop.ini 1.exe File created C:\Users\Admin\Downloads\desktop.ini 1.exe File created C:\Users\Admin\OneDrive\desktop.ini 1.exe File created C:\Users\Admin\Searches\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini 1.exe File created C:\Users\Public\Videos\desktop.ini 1.exe File created C:\Users\Admin\Favorites\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini 1.exe File created C:\Users\Admin\Pictures\desktop.ini 1.exe File created C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini 1.exe