General
- Target Ransomware.FancyLocker.zip
- Size 219KB
- Sample230412-ntr64ade2t
- SHA256 be9ed7b1e2219fb64293248dc95d0de3e74c27daa26e5f7ef743c74b58ef950d
- MD5 be3950bad736dc09421b53368654b99e
- SHA1 c2c235f0c7350afb14292a39b7cee3f2de3d65b5
- SHA512 cddb96ff8da84e1945f79f4d3a74737ab085fe1fbfd86acdd1ec24bbc970d44dcf7cf5b7bae979f182c9f011d6f2de15290dfdf4dd80ef92ab8de932e838e19f
- SSDEEP 6144:2vK8oJo2QTTGMIn5ipoBLmU9rTug4lMyMe/cGlrnDc:2y8aEn+spoBLmU9Xug42G/XrnDc
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
Ransomware.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ransomware.exe
Resource
win10v2004-20230220-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Ransomware.FancyLocker
- Size 322KB
- SHA256 416d2f821b7cb984859cfce43be981c5c9bc1489446ba41951c041d5801b65cb
- MD5 39f33d6842fa6495ccd7a41e8ddcb9b8
- SHA1 61cd2b3e22e2e6e514d611d3154e001f7e9fd195
- SHA512 97e8b15b82b70efebbf5cbfbbd4ac4925a7300049f5866bf01b59396de43c633342b5bc2ed657aae573c9f77e2dd20fe67234110aef048c49a2af9c8bd45dc29
- SSDEEP 3072:iMMFnguNpdYSkMXV2KMMEuWgY792XaY6UTuuAk2usbA+klAGPqhdp4efHxub8ehY:ideMXVeuWgY79OWpmq/yQxuAeS9Jb/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect MafiaWare666 ransomware
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)