Overview

overview

10

Static

static

3

9353cf6347...68.exe

windows7-x64

10

9353cf6347...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9353cf6347377bf1194349bff4001485fac99a5cd3ee03781e81c157452dae68

  • Size

    11.9MB

  • Sample

    221014-e6acdagddm

  • MD5

    96a57994dac844201da03003ee2183ae

  • SHA1

    e7cd1448b9b33c928b25451a9f72de71b2dbc7bf

  • SHA256

    9353cf6347377bf1194349bff4001485fac99a5cd3ee03781e81c157452dae68

  • SHA512

    5f82aa92a1f15287884bc7fcb26f7b0bcf2db0444417c678e613c46f0c9da0833845ca1fefc10ea35ec58ad6d7c9c627081bdf94915e41f136b6abdf3e6cf6de

  • SSDEEP

    196608:wnHdJmVsyb49UuImXz1neX38DXDQ9/tbYPvbJQlHPrO2SvMTvN8CTJ+iGydotQa1:wnHdJmVsU4izm10MDTQ9/kJQlvrJTLxG

Score
10/10
demonwarepyinstallerransomware

Malware Config

Targets

    • Target

      9353cf6347377bf1194349bff4001485fac99a5cd3ee03781e81c157452dae68

    • Size

      11.9MB

    • MD5

      96a57994dac844201da03003ee2183ae

    • SHA1

      e7cd1448b9b33c928b25451a9f72de71b2dbc7bf

    • SHA256

      9353cf6347377bf1194349bff4001485fac99a5cd3ee03781e81c157452dae68

    • SHA512

      5f82aa92a1f15287884bc7fcb26f7b0bcf2db0444417c678e613c46f0c9da0833845ca1fefc10ea35ec58ad6d7c9c627081bdf94915e41f136b6abdf3e6cf6de

    • SSDEEP

      196608:wnHdJmVsyb49UuImXz1neX38DXDQ9/tbYPvbJQlHPrO2SvMTvN8CTJ+iGydotQa1:wnHdJmVsU4izm10MDTQ9/kJQlvrJTLxG

    Score
    10/10
    demonwareransomware

    • DemonWare

      Ransomware first seen in mid-2020.

      ransomwaredemonware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks