General
-
Target
d2203b6d272d44b7abc66e290c3b79767428168b077a16ded1db0babbe34f333
-
Size
158KB
-
Sample
221011-jmlcracher
-
MD5
3c4fa896e819cb8fada88a6fdd7b2cc7
-
SHA1
0ebf10867534cb472bb98344f80e3a8aac0aa507
-
SHA256
d2203b6d272d44b7abc66e290c3b79767428168b077a16ded1db0babbe34f333
-
SHA512
e4486c33fc7bf99700fabec50ead10a6159758603d50eabe650436098a977b8c9dc728d0e8dbc3e3718393a7ba67cca8ea2799ef83e9194f178f04ae9784473e
-
SSDEEP
3072:Wkb6bwPcmQ1mbTw8Gt189VTG079sTGyAzbnuvXdIR:WkTPcmscw/1ETGgWGy0uvC
Static task
static1
Behavioral task
behavioral1
Sample
d2203b6d272d44b7abc66e290c3b79767428168b077a16ded1db0babbe34f333.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
C:\Program Files\Microsoft Office\root\Integration\WANNA_RECOVER_KOXIC_FILEZ_LNELD.txt
Targets
-
-
Target
d2203b6d272d44b7abc66e290c3b79767428168b077a16ded1db0babbe34f333
-
Size
158KB
-
MD5
3c4fa896e819cb8fada88a6fdd7b2cc7
-
SHA1
0ebf10867534cb472bb98344f80e3a8aac0aa507
-
SHA256
d2203b6d272d44b7abc66e290c3b79767428168b077a16ded1db0babbe34f333
-
SHA512
e4486c33fc7bf99700fabec50ead10a6159758603d50eabe650436098a977b8c9dc728d0e8dbc3e3718393a7ba67cca8ea2799ef83e9194f178f04ae9784473e
-
SSDEEP
3072:Wkb6bwPcmQ1mbTw8Gt189VTG079sTGyAzbnuvXdIR:WkTPcmscw/1ETGgWGy0uvC
Score10/10-
Disables taskbar notifications via registry modification
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-