Overview

overview

10

Static

static

10

jsFhhfngkaDj.exe

windows7-x64

1

jsFhhfngkaDj.exe

windows10-2004-x64

1

Resubmissions

15-10-2023 11:37

231015-nrgycaha22 10

24-07-2023 15:22

230724-ssamwaeh63 10

24-07-2023 14:56

230724-sa2zeaee77 10

24-07-2023 14:55

230724-sajg3aee68 10

24-07-2023 14:49

230724-r64bnsed95 10

13-03-2023 12:39

230313-pvx96scd7x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jsFhhfngkaDj.exe

  • Size

    936KB

  • MD5

    8bd774fbc6f846992abda69ddabc3fb7

  • SHA1

    a6e940b1bd92864b742fbd5ed9b2ef763d788ea7

  • SHA256

    a9741b16f4169f56ae0f2e49c87f3c5360ed5ab4370e6d16bd86179999f11795

  • SHA512

    037c1f895d3bb44e5f37abec7202325639d6414cab71df88663b573a04a5f8d9cd3f5939fdcfdec995cec35f6e3ed2f905b78270522ffdd98f7e2a93106d6480

  • SSDEEP

    24576:zw71/dET5/y1ufQfvDN3y60HyOci+MIjxnGxs:Q1FWq1ufwrVy60HWMIVGK

Score
10/10
clop

Malware Config

Extracted

Family

clop

Ransom Note
___ Universidad de La Salle ___ === DO NOT ATTEMPT TO RESTORE OR MOVE THE FILES YOURSELF. THIS MAY DESTROY THEM === Here are some of the files we downloaded from your network: \\172.19.20.216\C$\Users\ruthrodriguezez \\172.19.0.25\Secretaria General Docs \\172.19.15.59\C$\Users\sarangel If you refuse to cooperate, all data will be published for free download on our portal: http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/ -> TOR browser CONTACT US BY EMAIL-> [email protected] or [email protected] OR WRITE TO THE CHAT AT-> http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/93868e77-1331-411a-9643-dc9ad26a5095?secret=lasalle (use TOR browser)

Signatures

  • Clop family
    clop
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • jsFhhfngkaDj.exe
    .exe windows:6 windows x86

    6343fa0399258ac183fe24b2f9f0af0c


    Headers

    Imports

    Sections