General
-
Target
10843ab4b6e4c9592a31a72bc5f7ccfa48fd365e6fba1b100319f40125f8da6f.zip
-
Size
27KB
-
Sample
230321-rwa75sda8x
-
MD5
132010c74da031c9fdb1835b02bc0c02
-
SHA1
57af536a4bd99977668d1f7473f890012150c71e
-
SHA256
0ab695f16de2f4d62bab9946cdccc83a4f87700c5a97567fee7406f080f64ff1
-
SHA512
0e6f6a4f855b62e9a062754ea4caa9e63dbc45d61170dfc4abb8c89444da6a9f4b16cb0b092b8161920b27315237ac44adce598d29b5f5b199d293f00e568e1c
-
SSDEEP
768:fgeOfJ5zJO5JH6phm7JG7ufS1tynwPmiC1IdwzC9mLZ1/:fTOfHMJMTu2VOiC1GwOG/
Static task
static1
Behavioral task
behavioral1
Sample
10843ab4b6e4c9592a31a72bc5f7ccfa48fd365e6fba1b100319f40125f8da6f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
10843ab4b6e4c9592a31a72bc5f7ccfa48fd365e6fba1b100319f40125f8da6f.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
10843ab4b6e4c9592a31a72bc5f7ccfa48fd365e6fba1b100319f40125f8da6f.exe
-
Size
79KB
-
MD5
3c070554f9b588ac31e317be5d5f5120
-
SHA1
43ff7548df9f8597a4a0e8af82fb75ad622f6750
-
SHA256
10843ab4b6e4c9592a31a72bc5f7ccfa48fd365e6fba1b100319f40125f8da6f
-
SHA512
9eab16bd98efdb908902bc7303962dfa645248c411a407234ba03c7bd75cd8909cd41902e4a50847677d6e42c20a10e98cbb0d57f31a11f60d3eb05936ab334b
-
SSDEEP
1536:m6UhZM4hubesrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2zs4:ghZ5YesrQLOJgY8Zp8LHD4XWaNH71dLI
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-