Overview

overview

10

Static

static

9

008ec79765...49.exe

windows7-x64

10

Resubmissions

16/11/2022, 01:42

221116-b4nkfacf5x10

29/03/2021, 16:19

210329-43p8tayw5n9

Sharing

Copy URL Twitter E-mail

General

  • Target
    008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549
  • Size 1.9MB
  • Sample221116-b4nkfacf5x
  • SHA256 008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
hadescryptonepackerransomware

Malware Config

Targets

    • Target
      008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549
    • Size 1.9MB
    • SHA256 008ec79765325200361d9c93ac35edd430f8b17894ff843268caa5acd6224549
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    hadescryptonepackerransomware

    • Hades Ransomware

      Ransomware family attributed to Evil Corp APT first seen in late 2020.

      ransomwarehades

    • Hades payload

    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

      cryptonepacker

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Deletes itself

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks