General
-
Target
HEUR-Trojan-Ransom.Win32.Generic-6a52b9cd66ae94e8d27eb0bc3a63e6bd2c3ba6903637533a554d786e00af2404.exe
-
Size
433KB
-
Sample
220924-lm7xvsccfn
-
MD5
7273bcc0c3c3cc89a922c9eb2cc6797e
-
SHA1
6bf35f44a2267755c2646c89c836bd618c4e964c
-
SHA256
6a52b9cd66ae94e8d27eb0bc3a63e6bd2c3ba6903637533a554d786e00af2404
-
SHA512
c344cd1ee725f76f64888805e0310fddf39e9946884298d05aab6f4d8b43af44191ac3402a2c7758b2b0680e4fbcefc08dd7c155397d21f6b314363f018b2725
-
SSDEEP
12288:ZIEFNyLxXcP/bBwW4l4xSMz47ao0Hu4l:ZIEzZeWnxSE4Ooq
Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.Win32.Generic-6a52b9cd66ae94e8d27eb0bc3a63e6bd2c3ba6903637533a554d786e00af2404.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.Win32.Generic-6a52b9cd66ae94e8d27eb0bc3a63e6bd2c3ba6903637533a554d786e00af2404.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
C:\Users\Admin\Desktop\ReadMe.txt
venuslocker@torbox3uiot6wchz.onion
16jvWspVfvhjRgJhGCDETf29cjQAyNmx9G
https://hastebin.com/semoseguli.pl
https://hastebin.com/pifegafupi.scala
https://hastebin.com/uxuxoqikon.scala
https://hastebin.com/rocukapaga.scala
https://hastebin.com/igeyejigef.erl
https://perfectmoney.is
https://pmbitcoin.com/btc
Targets
-
-
Target
HEUR-Trojan-Ransom.Win32.Generic-6a52b9cd66ae94e8d27eb0bc3a63e6bd2c3ba6903637533a554d786e00af2404.exe
-
Size
433KB
-
MD5
7273bcc0c3c3cc89a922c9eb2cc6797e
-
SHA1
6bf35f44a2267755c2646c89c836bd618c4e964c
-
SHA256
6a52b9cd66ae94e8d27eb0bc3a63e6bd2c3ba6903637533a554d786e00af2404
-
SHA512
c344cd1ee725f76f64888805e0310fddf39e9946884298d05aab6f4d8b43af44191ac3402a2c7758b2b0680e4fbcefc08dd7c155397d21f6b314363f018b2725
-
SSDEEP
12288:ZIEFNyLxXcP/bBwW4l4xSMz47ao0Hu4l:ZIEzZeWnxSE4Ooq
Score10/10-
Sets desktop wallpaper using registry
-