Overview

overview

8

Static

static

6612093888...13.exe

windows7-x64

8

6612093888...13.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    66120938887b4d13abee307e24fe6d05261b21dede4170d2fe15011574db8313

  • Size

    516KB

  • Sample

    221019-n2rwasgacm

  • MD5

    7061bccb53ea7df25866ae2cf390b2f5

  • SHA1

    41c8e888b960a01ae823a09cc61953118e67c5a0

  • SHA256

    66120938887b4d13abee307e24fe6d05261b21dede4170d2fe15011574db8313

  • SHA512

    8f15970b4cf7698976de89c93aa72379b6950232c8804088ddf72a1d6b259848844300530008c494c852e7dbcab428a66bff25fb1d8a7b5df8a67831a89601bf

  • SSDEEP

    1536:PjPqTrLutEGbGa4ItmbSnK0xrPgpOtnK0xrPgpOBnK0xhxg8Xo:PjPqTobG6nK4zgEtnK4zgEBnK47gyo

Score
8/10
ransomware

Malware Config

Targets

    • Target

      66120938887b4d13abee307e24fe6d05261b21dede4170d2fe15011574db8313

    • Size

      516KB

    • MD5

      7061bccb53ea7df25866ae2cf390b2f5

    • SHA1

      41c8e888b960a01ae823a09cc61953118e67c5a0

    • SHA256

      66120938887b4d13abee307e24fe6d05261b21dede4170d2fe15011574db8313

    • SHA512

      8f15970b4cf7698976de89c93aa72379b6950232c8804088ddf72a1d6b259848844300530008c494c852e7dbcab428a66bff25fb1d8a7b5df8a67831a89601bf

    • SSDEEP

      1536:PjPqTrLutEGbGa4ItmbSnK0xrPgpOtnK0xrPgpOBnK0xhxg8Xo:PjPqTobG6nK4zgEtnK4zgEBnK47gyo

    Score
    8/10
    ransomware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks