ff8b0de67671abebddee8c26f2f7c81abe677e337706ade78464ddf8e99b3550

General

Target

230105-k761mafa3t_pw_infected.zip
Size

94KB
Sample

230315-tdkd7sgc7y
MD5

b8b80a59bc3d4e11730cbabf7311fd60
SHA1

821c8b6a541e9f9d1dd7ab1c4c0906fd418a86ff
SHA256

ff8b0de67671abebddee8c26f2f7c81abe677e337706ade78464ddf8e99b3550
SHA512

5f153e2f8c52c670c44adcf6cfddaef0431addbc2b3cf886096e8120f43a8d4510c7498e9d939accdb576eb37ff772d16cdaefaadbb3f8a17ffdd5e695d57763
SSDEEP

1536:8QHyfcRzyzpbzOKUBRR2mpxHqTQPyzwuwwQZQ5Jz5h5iTQy19peAjqcbSpGjw2mM:12cRzAzZMRHxHQKjZQPdhkZ19peAjq+/

Score

10^/10

ransomware

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\ExportResolve.mpeg3

Ransom Note

??? What happend??? !!! Your files are encrypted !!! *All your files are protected by strong encryption with RSA-2048.* *There is no public decryption software.* ###### Program and private key, What is the price? The price depends on how fast you can pay to us.###### 1 day : 50 Bitcoin 2 day : 60 Bitcoin 3 day : 90 Bitcoin 4 day : 130 Bitcoin 5 day : permanent data loss !!!! Btc Address: bc1qakuel0s4nyge9rxjylsqdxnn9nvyhc2z6k27gz !!! After received, we will send program and private key to your IT department right now.!!! *Free decryption As a guarantee, you can send us up to 3 free decrypted files before payment.* email: [email protected] !!! Do not attempt to decrypt your data using third-party software, this may result in permanent data loss.!!! !!! Our program can repair your computer in few minutes.!!! 20496��

Emails

[email protected]

Extracted

Path

C:\Users\Admin\Videos\desktop.ini

Ransom Note

??? What happend??? !!! Your files are encrypted !!! *All your files are protected by strong encryption with RSA-2048.* *There is no public decryption software.* ###### Program and private key, What is the price? The price depends on how fast you can pay to us.###### 1 day : 50 Bitcoin 2 day : 60 Bitcoin 3 day : 90 Bitcoin 4 day : 130 Bitcoin 5 day : permanent data loss !!!! Btc Address: bc1qakuel0s4nyge9rxjylsqdxnn9nvyhc2z6k27gz !!! After received, we will send program and private key to your IT department right now.!!! *Free decryption As a guarantee, you can send us up to 3 free decrypted files before payment.* email: [email protected] !!! Do not attempt to decrypt your data using third-party software, this may result in permanent data loss.!!! !!! Our program can repair your computer in few minutes.!!! 512��

Emails

[email protected]

Targets

- Target
  
  35a273df61f4506cdb286ecc40415efaa5797379b16d44c240e3ca44714f945b
- Size
  
  165KB
- MD5
  
  b6c1128fbff30b2a37498a042261ebbf
- SHA1
  
  1028a0e6cecb8cfc4513abdbe3b9d948cf7a5567
- SHA256
  
  35a273df61f4506cdb286ecc40415efaa5797379b16d44c240e3ca44714f945b
- SHA512
  
  4d6610654e0d86466ecfb90f1131df33eb7a146393a5c4a6daec691807a5c8b7661e53dfaabc9e944c659b7ca50927ff452747a7ea0cc2e9f37ead139f876697
- SSDEEP
  
  3072:AQO8F9MRWkb5+YZ3qcdk4zRc4nsEwp82RHnSxFgcpwDT:y8/M9b53aH4PnqHSVwDT
Score

10^/10

ransomware
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Matrix

10^/10

Sharing

General

Malware Config

Extracted

Extracted

Targets

Modifies extensions of user files

Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2