General
-
Target
DimCo payload.bin.exe
-
Size
301KB
-
Sample
220831-wfq1wahfap
-
MD5
9d82063518aaf2fead87538da8c0a08c
-
SHA1
966e2b157845ba298752eebb0ce71ae05200bc6d
-
SHA256
23bdeb9ae6a8f414c33ed8baf2de46477d0bc7f469dd543d60332a04e0b7c039
-
SHA512
66cc6826f6d958c45cb830abeeb13faee8f31989785876d0e8071846336194dd1539afe99e51694e4f832b8f3896de372305fa86d2596ac4fdb911ca23079fe2
-
SSDEEP
6144:yFxvRZVLlfh7rZthO+JjkuHEEAt/wz/60baxHUh:mZdfrXg+JwuKt/S/605h
Static task
static1
Behavioral task
behavioral1
Sample
DimCo payload.bin.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
DimCo payload.bin.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
C:\Users\Admin\Documents\ConnectPing.html
ryuk
Targets
-
-
Target
DimCo payload.bin.exe
-
Size
301KB
-
MD5
9d82063518aaf2fead87538da8c0a08c
-
SHA1
966e2b157845ba298752eebb0ce71ae05200bc6d
-
SHA256
23bdeb9ae6a8f414c33ed8baf2de46477d0bc7f469dd543d60332a04e0b7c039
-
SHA512
66cc6826f6d958c45cb830abeeb13faee8f31989785876d0e8071846336194dd1539afe99e51694e4f832b8f3896de372305fa86d2596ac4fdb911ca23079fe2
-
SSDEEP
6144:yFxvRZVLlfh7rZthO+JjkuHEEAt/wz/60baxHUh:mZdfrXg+JwuKt/S/605h
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-