Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Agent.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Agent.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Agent.hsk-b66c5be4be3dfa0c9285e7724ddf290708ae4014183e8642d1ded4f6d7a9dd67
-
Size
56KB
-
MD5
7d976e7e0eb26db1feb032ae195d237c
-
SHA1
241f6d6752baaa51048fb4ee48816952e1f9c6f8
-
SHA256
b66c5be4be3dfa0c9285e7724ddf290708ae4014183e8642d1ded4f6d7a9dd67
-
SHA512
812f88c52702cb54c27e24a585e065f8586d8bdf497a4ac3fec2f86e75467d4d04421816cfec95350f537dcdfcbb38b9d2fb8ffb2150b4b6a69a29e55aa7c2af
-
SSDEEP
1536:LA8vyjGJCvpSaqUJYtsECyzf7L+rcNxMUfrmFAoWmOIW:D4GApaUJYtsECyj7LwcN3fsOI
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Agent.hsk-b66c5be4be3dfa0c9285e7724ddf290708ae4014183e8642d1ded4f6d7a9dd67.exe windows x86
3c358dcc38a877668b13f9a308a4f8ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateMailslotA
CreateDirectoryA
RemoveDirectoryA
GetCommandLineA
SetEvent
WriteFile
FindAtomA
lstrlenA
GetSystemTime
VirtualProtectEx
CreateEventA
ExitThread
WriteConsoleW
SetVolumeLabelW
SetStdHandle
HeapFree
RemoveDirectoryA
GetFileType
FindClose
FindClose
ReleaseMutex
IsBadCodePtr
GetVersion
ResetEvent
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
rasmxs
DeviceEnum
DeviceEnum
DeviceEnum
DeviceEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ