General
-
Target
HEUR-Trojan-Ransom.MSIL.Agent.gen-1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1.exe
-
Size
214KB
-
Sample
220924-lm7xvsahh9
-
MD5
6627486ab7443b9867e274355651c071
-
SHA1
389f9b6d6b8d3dff216b0d008990e16db25fdcf7
-
SHA256
1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1
-
SHA512
e91f05843cc777a3b5ba28c7841c0076de64c1f9bb025646fa5df589d97f898b1c4aedcfddad74566cef7858ebaba065dfada041b0d334fd45f51a8939becca0
-
SSDEEP
3072:fRM+lmsolAIrRuw+mqv9j1MWLQCMTmmsolNIrRuw+mqv9j1MWLQA0d:fK+lDAAYTmDANS
Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.MSIL.Agent.gen-1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.MSIL.Agent.gen-1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
C:\Users\Admin\Desktop\_readme.txt
cyborgyarraq@protonmail.ch
1LLubVvDAXd3RoSAKUFbLdv4EAWH37NEcu
Targets
-
-
Target
HEUR-Trojan-Ransom.MSIL.Agent.gen-1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1.exe
-
Size
214KB
-
MD5
6627486ab7443b9867e274355651c071
-
SHA1
389f9b6d6b8d3dff216b0d008990e16db25fdcf7
-
SHA256
1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1
-
SHA512
e91f05843cc777a3b5ba28c7841c0076de64c1f9bb025646fa5df589d97f898b1c4aedcfddad74566cef7858ebaba065dfada041b0d334fd45f51a8939becca0
-
SSDEEP
3072:fRM+lmsolAIrRuw+mqv9j1MWLQCMTmmsolNIrRuw+mqv9j1MWLQA0d:fK+lDAAYTmDANS
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-