General

  • Target

    ea6b3652c6a1591f90c44831248a641c13ddcb1f0efd2c0de374bfe803a0039e

  • Size

    4.5MB

  • Sample

    221207-m56cesdg6w

  • MD5

    4b9eb7effc356c12d0f6f49593b0f85c

  • SHA1

    f7ffa9d3683b0952aecf8899a8a3137173e25023

  • SHA256

    ea6b3652c6a1591f90c44831248a641c13ddcb1f0efd2c0de374bfe803a0039e

  • SHA512

    eab1c86ea54d31ba26055df55279294162c065421614dcc8ffc24774f39cbf80546c105932e2e25b1bef70633a93a861c9748f1766d6d35c5121bcfa6169cf47

  • SSDEEP

    98304:v3hs0eL1EW2uN16nwNMp9VeEQQD+t0DCZFOs:PFeiL8FiTV31+t0D0F

Score
10/10

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\HOW TO RESTORE YOUR FILES.TXT

Ransom Note
Hello! All your files are encrypted! Write to us if you want to restore them. We can make it very fast. We also downloaded 700 GB of valuable information from your network. Contact me by email: AmandaSnoy@tutanota.com or JohniFlex@airmail.cc The subject line must contain an encryption extension or the name of your company! Do not rename encrypted files, you may lose them forever. You may be a victim of fraud. Free decryption as a guarantee. Send us up to 3 files for free decryption. The total file size should be no more than 1 MB! (not in the archive), and the files should not contain valuable information. (databases, backups, large Excel spreadsheets, etc.) To contact us, we recommend that you create an email address at protonmail.com or tutanota.com Because gmail and other public email programs can block our messages! If you do not receive a response from us for a long time, check your spam folder. =========================================================== Customer service TOX ID: 0FF26770BFAEAD95194506E6970CC1C395B04159038D785DE316F05CE6DE67324C6038727A58 Only emergency! Use if support is not responding
Emails

AmandaSnoy@tutanota.com

JohniFlex@airmail.cc

Targets

    • Target

      ea6b3652c6a1591f90c44831248a641c13ddcb1f0efd2c0de374bfe803a0039e

    • Size

      4.5MB

    • MD5

      4b9eb7effc356c12d0f6f49593b0f85c

    • SHA1

      f7ffa9d3683b0952aecf8899a8a3137173e25023

    • SHA256

      ea6b3652c6a1591f90c44831248a641c13ddcb1f0efd2c0de374bfe803a0039e

    • SHA512

      eab1c86ea54d31ba26055df55279294162c065421614dcc8ffc24774f39cbf80546c105932e2e25b1bef70633a93a861c9748f1766d6d35c5121bcfa6169cf47

    • SSDEEP

      98304:v3hs0eL1EW2uN16nwNMp9VeEQQD+t0DCZFOs:PFeiL8FiTV31+t0D0F

    Score
    10/10

MITRE ATT&CK Matrix

Tasks