General
-
Target
locker.bin.zip
-
Size
86KB
-
Sample
220929-as31bahde7
-
MD5
7ac82788846db468840a7b437259387c
-
SHA1
a6a358ae850c741f1955d10d30876f791657b8d8
-
SHA256
9fc79081e2f45a341ff9ab054413d6b5e561daaec27fdd6aefaffc77cf7509b4
-
SHA512
5c05b16826ddaec1342f86a917bae118308992f4aa34d5cc4a079f9e6cae3b476da9614cbb4c4ec6ec3e498ecdaef887ba4cfbb6ef7b39a39fb781a139af9931
-
SSDEEP
1536:zD4Co484SjMVsj9SX/2dwSY9ztV2suCrWuHQgobis3AZiMTmfHExXKIcyBnr97:ICo48hYVsZSX/229zXWkEmmSmfHyDR7
Static task
static1
Behavioral task
behavioral1
Sample
locker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
locker.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
C:\warning !!!! Readme bl00dy Gang.txt
https://t.me/bl00dy_Ransomware_Gang
Targets
-
-
Target
locker.bin
-
Size
178KB
-
MD5
8d27d0c897ce21f1036bf659fc663cf2
-
SHA1
afe3d0fb48092aeca4dcd3989a076e87fdbe69b2
-
SHA256
139a8bb2c5537190e747d2f651b423147018fd9a9a21bb36281d4ce1c61727c1
-
SHA512
531873e8faaf801a447f70848969865750f41fd5ff15bd8c47015e766a9bb8cc1fbb8dcae16ddbf1e4f9dbc5750af593ef8fdcf94cd1a61efa00c7790cda4374
-
SSDEEP
3072:/gq2DKdMbv1S/n6rHBJK3V9LBSLrKa+HQXvMES/D3Yw7yZyYpEaI:/84X/19LUPMcMEw3kTI
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Drops desktop.ini file(s)
-