Overview
overview
1Static
static
1Config.js
windows7-x64
1Config.js
windows10-2004-x64
1FormGame.js
windows7-x64
1FormGame.js
windows10-2004-x64
1Properties...er.vbs
windows7-x64
1Properties...er.vbs
windows10-2004-x64
1Properties...es.vbs
windows7-x64
1Properties...es.vbs
windows10-2004-x64
1Tools/Blockr.js
windows7-x64
1Tools/Blockr.js
windows10-2004-x64
1Tools/Hacking.js
windows7-x64
1Tools/Hacking.js
windows10-2004-x64
1Tools/Locker.js
windows7-x64
1Tools/Locker.js
windows10-2004-x64
1Tools/Windows.js
windows7-x64
1Tools/Windows.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Config.js
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Config.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
FormGame.js
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
FormGame.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Properties/Resources.Designer.vbs
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Properties/Resources.Designer.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Properties/Resources.vbs
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Properties/Resources.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Tools/Blockr.js
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Tools/Blockr.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Tools/Hacking.js
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Tools/Hacking.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
Tools/Locker.js
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Tools/Locker.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Tools/Windows.js
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Tools/Windows.js
Resource
win10v2004-20230915-en
General
-
Target
Ransomware.Jigsaw.zip
-
Size
45KB
-
MD5
7bf87143a96bc688026d7be1e2fdcd86
-
SHA1
f31fa030e4c409874bb5a3f3265f07265a913b39
-
SHA256
0d5f08eb7f9c86c47ba5b04e21039cf8a1f82d5ed92075498cbbdde849df6f2a
-
SHA512
7b497cddd2d2e97301549b24babf278a2f472631e4a46366cd0967e88561f6d476da54248182702aedd24af514de8726db219c2cef74a2f847a360a0acb492bb
-
SSDEEP
768:q9Nrh5XtsC318UdEGXQQS12IMnK/YYTqZ+vyuE14bdJYpu1g0zW+gCrGcDa0yC:m1RZtS1xRjyuE1grpgCf
Malware Config
Signatures
Files
-
Ransomware.Jigsaw.zip.zip
Password: infected
-
Config.cs.js
-
FodyWeavers.xml
-
FormBackground.Designer.cs
-
FormBackground.cs
-
FormEncryptedFiles.Designer.cs
-
FormEncryptedFiles.cs
-
FormGame.Designer.cs
-
FormGame.cs.js
-
Program.cs
-
Properties/.DS_Store
-
Properties/AssemblyInfo.cs
-
Properties/Resources.Designer.cs.vbs
-
Properties/Resources.resx.vbs
-
Properties/Settings.Designer.cs
-
Properties/Settings.settings
-
Resources/ExtensionsToEncrypt.txt
-
Resources/Jigsaw.jpg.jpg
-
Tools/Blockr.cs.js
-
Tools/Hacking.cs.js
-
Tools/Locker.cs.js
-
Tools/Windows.cs.js
-
packages.config