2848233d6e73000134fef71caf087f2aa326084dd791e2cd5aab2346b63de50b

General

Target

tested_protected.bin.exe
Size

65KB
Sample

230309-fe4mkshe5z
MD5

991a487e6e1d4e1eb45684c65b2a82d3
SHA1

b5e31fd6125709b27726d5d3d21d9beb46c6eba6
SHA256

2848233d6e73000134fef71caf087f2aa326084dd791e2cd5aab2346b63de50b
SHA512

c4e9a49cea01654e64b0e7b7711734d63f3fcb5a08866f9f859848306c0df8f6cfc66639851842ca9e0efbcf8ef43f400ba43d62452a3f22c65eaacc71948568
SSDEEP

768:F/A2E4sTzIflnfmoh/sXb4vDM5xBqBv4OcSb9btv+s7cPNncd7wrmvpt2o1pV2vN:hAzc5rhUaDMxQhbtQ742zCoVB

Score

10^/10

Malware Config

Extracted

Path

C:\Users\Admin\Videos\HELP_DECRYPT_YOUR_FILES.txt

Ransom Note

Oops All Of your important files were encrypted Like document pictures videos etc.. Don't worry, you can return all your files! All your files, documents, photos, databases and other important files are encrypted by a strong encryption. How to recover files? RSA is a asymmetric cryptographic algorithm, you need one key for encryption and one key for decryption so you need private key to recover your files. It’s not possible to recover your files without private key. The only method of recovering files is to purchase an unique private key.Only we can give you this key and only we can recover your files. What guarantees you have? As evidence, you can send us 1 file to decrypt by email We will send you a recovery file Prove that we can decrypt your file Please You must follow these steps carefully to decrypt your files: Send $980 worth of bitcoin to wallet: bc1qzpa3j6qse5xfxft2xy7h2phq04wq9pk66lllz5 after payment,we will send you Decryptor software contact email: [email protected] Your personal ID: E64AEaw03C9JdM5fJBTT2lkpIsLhtZdbM/LQsJMcc6NgEfmvfvo8uod4z4ohWUTvuAKjbrWFreBAyzPEJ0VRBJ4husG6kPAWCtx25IcrtU1CiSLjhasNdIpfu9ZNhpLHNIT7TP4HLQcytCyYtjBhQFVviEkVQuqv0cIOGbnHysA=

Emails

[email protected]

Extracted

Path

C:\Users\Admin\Videos\HELP_DECRYPT_YOUR_FILES.txt

Ransom Note

Oops All Of your important files were encrypted Like document pictures videos etc.. Don't worry, you can return all your files! All your files, documents, photos, databases and other important files are encrypted by a strong encryption. How to recover files? RSA is a asymmetric cryptographic algorithm, you need one key for encryption and one key for decryption so you need private key to recover your files. It’s not possible to recover your files without private key. The only method of recovering files is to purchase an unique private key.Only we can give you this key and only we can recover your files. What guarantees you have? As evidence, you can send us 1 file to decrypt by email We will send you a recovery file Prove that we can decrypt your file Please You must follow these steps carefully to decrypt your files: Send $980 worth of bitcoin to wallet: bc1qzpa3j6qse5xfxft2xy7h2phq04wq9pk66lllz5 after payment,we will send you Decryptor software contact email: [email protected] Your personal ID: W1dKvsK1HyKQT5u/i4aaib9yFkqoX8kKcMEG2seVJCnuAdyw9XUbDwX+6lIkMFU17wn2yDuluKEk7o0Y0dNo6FzEziHE1EGb9r786e2em9B57Hj4k2RVck1byIlSHaLnmNn4zck4DV/nn1m0f4jiDzG21wKaLfDp1Q1YqoSkF5s=

Emails

[email protected]

Targets

- Target
  
  tested_protected.bin.exe
- Size
  
  65KB
- MD5
  
  991a487e6e1d4e1eb45684c65b2a82d3
- SHA1
  
  b5e31fd6125709b27726d5d3d21d9beb46c6eba6
- SHA256
  
  2848233d6e73000134fef71caf087f2aa326084dd791e2cd5aab2346b63de50b
- SHA512
  
  c4e9a49cea01654e64b0e7b7711734d63f3fcb5a08866f9f859848306c0df8f6cfc66639851842ca9e0efbcf8ef43f400ba43d62452a3f22c65eaacc71948568
- SSDEEP
  
  768:F/A2E4sTzIflnfmoh/sXb4vDM5xBqBv4OcSb9btv+s7cPNncd7wrmvpt2o1pV2vN:hAzc5rhUaDMxQhbtQ742zCoVB
Score

10^/10

evasion ransomware trojan
- UAC bypass
  evasion trojan
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2