General

  • Target

    11608706825.zip

  • Size

    31.4MB

  • MD5

    5ca441981aba63b1b78372900de2c1a2

  • SHA1

    7e724aa60cd4b978dcb209a97b33b2b667728078

  • SHA256

    15603ba2add8457b464ea344e423a0cdbd9f2c795334f930e68a1e125eb87329

  • SHA512

    68d1340e15bcbd9a087d51efe76b1d23346b6d26575498e43bbc8fd245689c2798309a4aafc9906cd52fd51662f41f4629d7ec1edf51392fb2c1c707469a5a3b

  • SSDEEP

    786432:nxn31I/vsyuqDpvRgo9hgfgUSP4/jkAwup:nxnkscQZgUSg/jqa

Score
5/10

Malware Config

Signatures

  • Often Ransomware samples write a note containing information on how to pay the ransom. 1 IoCs

    Often Ransomware samples write a note containing information on how to pay the ransom.

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

Files

  • 11608706825.zip
    .zip

    Password: infected

  • 170670e0b8ee0a3466d7874ccfe3eeb2e680a436bff7e4529e432d607d491269
    .zip

    Password: infected

  • installer_nopass/Installer.exe
    .exe windows x86

    Password: infected

    0f19f1f9a30c8021a9a4d27d118c376e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • installer_nopass/Qt5Concurrent.dll
    .dll windows x86

    Password: infected

    6399f257eab1ac15ffbb348eb7d97870


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/Qt5Core.dll
    .dll windows x86

    Password: infected

    386385e129db9e6dddfb9574de96d880


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/Qt5Gui.dll
    .dll windows x86

    Password: infected

    8d390ac7467fe01a107573d04e78ea17


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/Qt5Network.dll
    .dll windows x86

    Password: infected

    073c914f5352b439e232d3b8a755c686


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/Qt5Svg.dll
    .dll windows x86

    Password: infected

    dd7950c88eeac99abfb28be704a9a415


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/Qt5Widgets.dll
    .dll windows x86

    Password: infected

    8a1e42112bd881aa1a51ae4a42360dd8


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libbrotlicommon.dll
    .dll .js windows x86
  • installer_nopass/libbrotlidec.dll
    .dll windows x86

    6fc96ad47bb9f5e94556dce11017c4a5


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libbz2-1.dll
    .dll windows x86

    5737407d9e277062d22b9b99728e1ecc


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libcrypto-1_1.dll
    .dll windows x86

    7a03d16837591aab278e5d22d51fc942


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libdouble-conversion.dll
    .dll windows x86

    554379d4096ed2f16b324e383d763efd


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libfreetype-6.dll
    .dll windows x86

    d847f3ddbeea9f6774ee7246565f3ccf


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libgcc_s_dw2-1.dll
    .dll windows x86

    e29ace961c4c100b7f36b0d9cea59c9f


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libgcrypt-20.dll
    .dll windows x86

    96393c07c2ad07945caf5d66c73f0ee9


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libglib-2.0-0.dll
    .dll windows x86

    b562af6e6aed00a9f164a66bc039d3b5


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libgpg-error-0.dll
    .dll windows x86

    c6925d8c9d3ac5614a7adae86a2b0bef


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libgraphite2.dll
    .dll windows x86

    96a562b47fd7c07866da5f3d786e20d6


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libharfbuzz-0.dll
    .dll windows x86

    23197a12391812e663c4901246b86575


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libiconv-2.dll
    .dll windows x86

    05c8149c00a19f07f9df46201d74b999


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libicudt67.dll
    .dll windows x86

    9d1684f5e4e000def639ebe9a2345431


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libicuin67.dll
    .dll windows x86

    48c78ad27847ea26d663777de91015f1


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libicuuc67.dll
    .dll windows x86

    024bc789b80dcf7699880544dc89d4d0


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libintl-8.dll
    .dll windows x86

    10c9f37715fd3b1b5c832f50e04e0794


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libjson-c-2.dll
    .dll windows x86

    55d11e541aba92cbf96905803e1ca07e


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libkeepassx-autotype-windows.dll
    .dll windows x86

    ce3bdd4c46fc978ba3d7ec9b32292dcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libpcre-1.dll
    .dll windows x86

    2c6201ddb94d92757a3a578b92a24add


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libpcre2-16-0.dll
    .dll windows x86

    2510a5107ace26d981256939e05c6fb1


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libpng16-16.dll
    .dll windows x86

    ddfdf88748784952d83a8f44967c5617


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libqrencode.dll
    .dll windows x86

    5739e4e86a78e12988ec5be43d5af7c3


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libquazip5.dll
    .dll windows x86

    ecd9819a8e0b86949825dd3deeefe122


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libreadline8.dll
    .dll windows x86

    b230f9039d899120104f91332fbcf43b


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libsodium-23.dll
    .dll windows x86

    d4bfc16ad38a9e21a53f5679ae74e627


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libssl-1_1.dll
    .dll windows x86

    199581eef44035868a319c4f035da7a7


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libssp-0.dll
    .dll windows x86

    e6944207fcb739a005c1074413ee7e1a


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libstdc++-6.dll
    .dll windows x86

    d28ead85857e7f3ecdf818e7fd466cf2


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libtermcap-0.dll
    .dll windows x86

    e0b67c03aa9d44e2b8e5203b49767f10


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libwinpthread-1.dll
    .dll windows x86

    6ee1589073827ea048462f880d8fdee5


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libykpers-1-1.dll
    .dll windows x86

    88d3977572938a167a92a9e3b8afbfe6


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libyubikey-0.dll
    .dll windows x86

    a1ebd96fefe1b2165c7fb80fd63727a9


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/libzstd.dll
    .dll windows x86

    0496c5aa0e536fd32e4170f5ffa4a873


    Headers

    Imports

    Exports

    Sections

  • installer_nopass/zlib1.dll
    .dll windows x86

    72638be903b151c008f0be34d009a324


    Headers

    Imports

    Exports

    Sections