General
-
Target
1ab0e134e38938200b269d9f5d57594637cb0cdfc11d0558e95495a5c92a6404
-
Size
135KB
-
Sample
220628-tg7c5safbq
-
MD5
85a43bc9f856a5b9a4f325ffcb925500
-
SHA1
68670b669db0d3eed12203b6cdd0f25e31bd981c
-
SHA256
1ab0e134e38938200b269d9f5d57594637cb0cdfc11d0558e95495a5c92a6404
-
SHA512
2eef97a49f33cf9b8627ac810526c527ecadf95682b5d0a69368b5a3d252827217830c9bf028c11df3a09d9b259c11267dfd686e07d09bb79b3ad39d77f7a346
Static task
static1
Behavioral task
behavioral1
Sample
1ab0e134e38938200b269d9f5d57594637cb0cdfc11d0558e95495a5c92a6404.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1ab0e134e38938200b269d9f5d57594637cb0cdfc11d0558e95495a5c92a6404.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\Users\Admin\Desktop\_HELP_instructions.html
http://mphtadhci5mrdlju.tor2web.org/DGJW8WGB5I7UCKEK
http://mphtadhci5mrdlju.onion/DGJW8WGB5I7UCKEK
Extracted
C:\Users\Admin\Desktop\_HELP_instructions.html
http://mphtadhci5mrdlju.tor2web.org/674IF9IX6QK4975W
http://mphtadhci5mrdlju.onion/674IF9IX6QK4975W
Targets
-
-
Target
1ab0e134e38938200b269d9f5d57594637cb0cdfc11d0558e95495a5c92a6404
-
Size
135KB
-
MD5
85a43bc9f856a5b9a4f325ffcb925500
-
SHA1
68670b669db0d3eed12203b6cdd0f25e31bd981c
-
SHA256
1ab0e134e38938200b269d9f5d57594637cb0cdfc11d0558e95495a5c92a6404
-
SHA512
2eef97a49f33cf9b8627ac810526c527ecadf95682b5d0a69368b5a3d252827217830c9bf028c11df3a09d9b259c11267dfd686e07d09bb79b3ad39d77f7a346
Score10/10-
suricata: ET MALWARE Ransomware Locky CnC Beacon 21 May
suricata: ET MALWARE Ransomware Locky CnC Beacon 21 May
-
Deletes itself
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
-