Behavioral task
behavioral1
Sample
instructions_read_me.txt
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
instructions_read_me.txt
-
Size
1KB
-
MD5
bd64b1cd819aeaf70d1109b2a814769c
-
SHA1
82adbbfd9119753b792ea34e2b05bdaae52d6d17
-
SHA256
0c915ce6cd1676ecc99863f47ed28c6466a2532ce9df7bbd2ae810b7bbf026f7
-
SHA512
733666362d7342f096e454d56652be07b96b41a665859bcd2574d63cdb4966381ee9f58d421b22f21acf655ae65b122d56a9e14459064de9c0d132b4a2507f03
Score
10/10
Malware Config
Extracted
Family
blackbasta
Ransom Note
ATTENTION!
Your network has been breached and all data was encrypted. Please contact us at:
https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/
Login ID: 3ff43b36-b444-4dfa-8b09-9a09d7afd541
*!* To access .onion websites download and install Tor Browser at:
https://www.torproject.org/ (Tor Browser is not related to us)
*!* To restore all your PCs and get your network working again, follow these instructions:
- Any attempts to modify, decrypt or rename the files will lead to its fatal corruption. It doesn't matter, who are trying to do this, either it will be your IT guys or a recovery agency.
Please follow these simple rules to avoid data corruption:
- Do not modify, rename or delete files. Any attempts to modify, decrypt or rename the files will lead to its fatal corruption.
- Do not hire a recovery company. They can't decrypt without the key.
They also don't care about your business. They believe that they are
good negotiators, but it is not. They usually fail. So speak for yourself.
Waiting you in a chat.
URLs
https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/
Signatures
-
Blackbasta family
Files
-
instructions_read_me.txt