Overview

overview

10

Static

static

10

samples5.zip

windows7-x64

1

samples5.zip

windows10-2004-x64

1

104b5623d8...d3.exe

windows7-x64

1

104b5623d8...d3.exe

windows10-2004-x64

1

160010289c...02.exe

windows7-x64

1

160010289c...02.exe

windows10-2004-x64

1

1a757d4aa5...6f.exe

windows7-x64

1

1a757d4aa5...6f.exe

windows10-2004-x64

1

21ff399e57...56.dll

windows7-x64

1

21ff399e57...56.dll

windows10-2004-x64

1

3c311150e2...bf.exe

windows7-x64

1

3c311150e2...bf.exe

windows10-2004-x64

1

3efe068c64...0f.exe

windows7-x64

3

3efe068c64...0f.exe

windows10-2004-x64

3

403be0442e...17.exe

windows7-x64

10

403be0442e...17.exe

windows10-2004-x64

10

49c96478e9...66.exe

windows7-x64

6

49c96478e9...66.exe

windows10-2004-x64

6

5154914351...a7.exe

windows7-x64

1

5154914351...a7.exe

windows10-2004-x64

1

616ea8ac34...858437

windows7-x64

1

616ea8ac34...858437

windows10-2004-x64

1

6a637e90e0...bc.exe

windows7-x64

10

6a637e90e0...bc.exe

windows10-2004-x64

9

759c06eedc...4c.dll

windows7-x64

10

759c06eedc...4c.dll

windows10-2004-x64

10

85cad059cc...20.exe

windows7-x64

1

85cad059cc...20.exe

windows10-2004-x64

1

8ca6b7929e...3c.exe

windows7-x64

10

8ca6b7929e...3c.exe

windows10-2004-x64

9

90ef3f841b...77.exe

windows7-x64

9

90ef3f841b...77.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    samples5.zip

  • Size

    322KB

  • MD5

    ecd0abc33637ca50ea4c8aff149d0242

  • SHA1

    66d943b612513b34d06b0555b9e7136cf97e0d0a

  • SHA256

    5023ffe58f1945012086d05f637983928e3e7c16eb5487196096d43b39d151ef

  • SHA512

    7f6a3a919c023c77de66fade82a6ca2e8838c0fca29d804288281e8daa995e7faad81b42ac2efaae6356d65bd09d16abd12ae2143ce49df60ce46cc52518491e

  • SSDEEP

    6144:45dGX0EnlLStEnG5cETVfMewGtZW3ziNjdK6PfFBKWsWlwOBoWTq:45wEEnN2Y7EhMNGtZW3zihd1M7Wip

Score
10/10
ransomware

Malware Config

Extracted

Ransom Note
All your files have been encrypted! All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail [email protected] Write this ID in the title of your message D08133EB In case of no answer in 24 hours write us to theese e-mails: [email protected] You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. Free decryption as guarantee Before paying you can send us up to 5 files for free decryption. The total size of files must be less than 10Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.) How to obtain Bitcoins The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. https://localbitcoins.com/buy_bitcoins Also you can find other places to buy Bitcoins and beginners guide here: http://www.coindesk.com/information/how-can-i-buy-bitcoins/ Attention! Do not rename encrypted files. Do not try to decrypt your data using third party software, it may cause permanent data loss. Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • samples5.zip
    .zip
  • 104b5623d8edd7e56d7e824d900ef57cc085ad7b2935c794af58de87d4f8c2d3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 160010289cc38de42f7b75fa817a6ef7931bfd8aa1370fb09559b2e035e05702
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1a757d4aa506d48a09ed5cf0c8f21b6d65a55f5e8aa736873a9e523c4278156f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 21ff399e57cc306a1ae1daab6009ea40c8aa96c39296d0f8781626de6bd19256
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 3efe068c644c96fff2a25a7351da85bad86949878df3c7cad76d83ad2f2c340f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 403be0442e847aee7ca7553e19672112450f2e034180a1f57eb8a6d7d39b8d17
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 49c96478e9d2b16219a7c86f031c5d8b241ae43550ce2fc2bea1d98fa90aa766
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • 5154914351d1abdc308c8a76474a19560a4624194feb98118d0710efb6804aa7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 616ea8ac34ae403d7094d53c0db11a24348f6e48eff80e254a93a1593f858437
  • 6a637e90e0673ee6090cc4fb47d82ab87ae7d26ffcff7a7dcafd4da167aea8bc
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 759c06eedcadd60ebd2aa3790eefa40d505044080cea4e1477d845611f322b4c
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • 85cad059cca352e70188c1744521100651a787ebabdaa8261badb0f3b6bb5020
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 8ca6b7929ece89d8d9050ae9f1e6c1b3dfa87217272e114e464160dce036463c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 90ef3f841bef457a352a092f2367a0de89d812318df6b2293876d5746281c777
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a09590420d9f8052f963e7126367ccf9cc56d8f4926096ac88bc85c0a47bb242
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a6bf42dc5d9161ff96d4cddee10e27f8139aff89d0c8ac8ef8f4abcc030c35b9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • acaceda44d3cdc6a38581f5665cbe0158e7f167869d9d1bb0b6f6c51febef0b5
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ba9b26cc08591655878f90c3d8c9e346680e80a40a076efa886d18926eae2293
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ba9fc5a2bbe62e749f57b3004aa8382da184b4a41286adb1b5d6351af4146d43
    .hta
  • c10d5ff0fdea61656fde622ecb6884eabd6b789df4f1948f148e2d2d07e5c721
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d84d6fcfe6330b7acbcaf1c0af116ace665c502e67a3898e7229cbd567283556
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e32431fbf8532a9eb2907514a19fe7cc9c19e96449143b8724f05f4a1a57854f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e5420cde582b0ec38280eccb94cfb889073dd158ada8970bea3cb4f8c4874086
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • f5b51c2fa1cda91604077bc7b2b812989eca851a53ef5c716f0d34fdbef9d335
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • f7818d7603ddfe6965b962b1c754fabfb4a11d68f0ee4eec462ed539860bf0c4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections