Behavioral task
behavioral1
Sample
6ad481f315f2ca646f0677e0b0890a6f.html
Resource
win7-20231215-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6ad481f315f2ca646f0677e0b0890a6f.html
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
6ad481f315f2ca646f0677e0b0890a6f
-
Size
1KB
-
MD5
6ad481f315f2ca646f0677e0b0890a6f
-
SHA1
1a7ca2838ab7fb3916c47ea45ca6a8c14a70206b
-
SHA256
a57a857e358441ef078a5dc4c3dd7d81f4a4c096925470313df35eb60c027d43
-
SHA512
b71a3e586b3b865857203196dbb7cbc0a6826a60f092aa8af5c3b72545ea1973f2c26515c85237d1d6ced0d206340a25cfca1b208d7b170cac8055c242fa146f
Score
10/10
Malware Config
Extracted
Family
ryuk
Ransom Note
contact
balance of shadow universe
Ryuk
$password = 'PuzY4wR0ylL'; $torlink = 'http://x6jpmpx64uhryco5m3ydplxxiegz4lhl53pqro2vod3od46ythvw2iad.onion';
function info(){alert("INSTRUCTION:\r\n1. Download tor browser.\r\n2. Open link through tor browser: " + $torlink + "\r\n3. Fill the form, your password: "+ $password +"\r\nWe will contact you shortly.\r\nAlways send files for test decryption.");};
URLs
http://x6jpmpx64uhryco5m3ydplxxiegz4lhl53pqro2vod3od46ythvw2iad.onion
Signatures
-
Ryuk family
Files
-
6ad481f315f2ca646f0677e0b0890a6f.html