Static task
static1
Behavioral task
behavioral1
Sample
ReadMe.hta
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ReadMe.hta
Resource
win10v2004-20230703-en
0 signatures
150 seconds
General
-
Target
ReadMe.hta
-
Size
11KB
-
MD5
21aab355417e963e8172ef72ba431cf6
-
SHA1
a20011dea742b0486c55be655e14d9b838c9e23c
-
SHA256
52c14a79e2de3f86586e94385621c6b53ed2fa25720619733205f48200acb4f7
-
SHA512
e4b17f4faa2ffc25f938a510d84f72993b712f91bde2dbb13c0c8955c16e559fb794c02bd125e7a81f9c2e5f62c88a26ea061f0ef08525c24776388db8caa15e
-
SSDEEP
192:M3mdxU1UPRHPEXyBYet2yXTWXnhLxmoLlfzfM8uaG3UN7tMs+OqdOgzzxJFVo:MdMRECCy+nZLlJdGEN7tMbNzxLVo
Score
10/10
Malware Config
Extracted
Ransom Note
YOUR FILES ARE ENCRYPTED
Your PC security is at risk
All your files were encrypted and important data was copied to our storage
If you do not need your files, then the private key will be deleted within 5 days
If you want to restore files and return important data, application, contact the operator and enter YOUR ID
ID of your personal operator
If the Operator did not respond within 24 hours or encountered any problem then send an email to our support
In the header of the letter, indicate your ID and attach 2-3 infected files for the decryption tool
Files should not have important information and should not exceed the size of more than 5 MB
As our guarantees, we will return your files restored
Attention! Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.
:::
Signatures
Files
-
ReadMe.hta.hta .js