44a7c5d45ffcfc207f33f40bf97a48823c2d3a19c0bb9a0c54e32c0e45c0ae91

General

Target

aa.bat
Size

77KB
Sample

231012-ew2zmsec8w
MD5

da7c13ec8098e54b5b090d8d9a4a6f73
SHA1

6eaff65099a89ceee06dba2a1bf46a9c0dda3a93
SHA256

44a7c5d45ffcfc207f33f40bf97a48823c2d3a19c0bb9a0c54e32c0e45c0ae91
SHA512

c94b108ee87002e0e595e51d8d5b74c3a74d8d5b2c02daf989b00cec4cf29545f5d7e7d2164f09c7bb443bc953bc9262e70017c0150caf20067d364ea6be0472
SSDEEP

384:wzqmB+m9dm9hm9rm99m93ml5mlomlumlSmlcmlsmlkmllmlZmjDmlfmn7mlJmlTF:8jcIm8KcBn7Vl9oemQes2kfbx

Score

10^/10

ransomware

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\how_to_recover_ur_files.txt

Ransom Note

Attention! Your files have been encrypted and are inaccessible. If you want to recover them, you must pay a ransom of $300 to the following bitcoin address: 3BKuiDHNSbdCdK8fHTUxCB4GRBiuKUrMzr. Failure to comply will result in permanent loss of your files. Once the payment is made, you will get a password decryption key and the files will be decrypted and restored.

Wallets

3BKuiDHNSbdCdK8fHTUxCB4GRBiuKUrMzr

Targets

- Target
  
  aa.bat
- Size
  
  77KB
- MD5
  
  da7c13ec8098e54b5b090d8d9a4a6f73
- SHA1
  
  6eaff65099a89ceee06dba2a1bf46a9c0dda3a93
- SHA256
  
  44a7c5d45ffcfc207f33f40bf97a48823c2d3a19c0bb9a0c54e32c0e45c0ae91
- SHA512
  
  c94b108ee87002e0e595e51d8d5b74c3a74d8d5b2c02daf989b00cec4cf29545f5d7e7d2164f09c7bb443bc953bc9262e70017c0150caf20067d364ea6be0472
- SSDEEP
  
  384:wzqmB+m9dm9hm9rm99m93ml5mlomlumlSmlcmlsmlkmllmlZmjDmlfmn7mlJmlTF:8jcIm8KcBn7Vl9oemQes2kfbx
Score

10^/10

ransomware
behavioral1 behavioral2