Resubmissions

01-03-2024 20:38

240301-ze5pesdb79 3

01-03-2024 20:03

240301-ysybtsce5x 3

01-03-2024 18:44

240301-xdmfcabg67 3

01-03-2024 17:56

240301-wjhhxabb92 10

General

  • Target

    Ransomware-Samples-main.zip

  • Size

    15.1MB

  • MD5

    e88a0140466c45348c7b482bb3e103df

  • SHA1

    c59741da45f77ed2350c72055c7b3d96afd4bfc1

  • SHA256

    bab1853454ca6fdd3acd471254101db1b805b601e309a49ec7b4b1fbcfc47ad7

  • SHA512

    2dc9682f4fb6ea520acc505bdbe7671ab7251bf9abd25a5275f0c543a6157d7fa5325b9dce6245e035641ab831d646f0e14f6649f9464f5e97431ab1bf7da431

  • SSDEEP

    393216:+8HaL/eOo2nfFSrjIMVePFmu/GyBSib+JYSWTmZ:LHayONnnBNmkPbDSWm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Ransomware-Samples-main.zip
    .zip
  • Ransomware-Samples-main/Cerber/Ransomware.Cerber.zip
    .zip

    Password: infected

  • cerber.exe
    .exe windows:5 windows x86 arch:x86

    9d6ed8d049bc10bc45b1995cb6f7f4b6


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/Cryptowall/Ransomware.Cryptowall.zip
    .zip

    Password: infected

  • cryptowall.bin
    .exe windows:5 windows x86 arch:x86

    edbc0337cc897a187d263d79c09c15c7


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/Jigsaw/Ransomware.Jigsaw.zip
    .zip

    Password: infected

  • jigsaw
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/LICENSE
  • Ransomware-Samples-main/Locky/Ransomware.Locky.zip
    .zip

    Password: infected

  • Locky
    .exe windows:4 windows x86 arch:x86

    0fcea3af550ad0a893e93808dccf17f4


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/Mamba/Ransomware.Mamba.zip
    .zip

    Password: infected

  • 131.exe
    .exe windows:5 windows x86 arch:x86

    dd8fd079a980cb9227eb869f7da9b258


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/Matsnu/Ransomware.Matsnu.zip
    .zip

    Password: infected

  • Matsnu-MBRwipingRansomware_1B2D2A4B97C7C2727D571BBF9376F54F_Inkasso Rechnung vom 27.05.2013 .com_
    .exe windows:5 windows x86 arch:x86

    bd52eaa585e8f1c2fba85e8df7a2e191


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/Petrwrap/Ransomware.Petrwrap.zip
    .zip

    Password: infected

  • 027cc450ef5f8c5f653329641ec1fed9.exe
    .dll windows:5 windows x86 arch:x86

    52dd60b5f3c9e2f17c2e303e8c8d4eab


    Code Sign

    Headers

    Imports

    Sections

  • 027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.bin.gz
    .gz
  • 027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.bin
    .dll windows:5 windows x86 arch:x86

    52dd60b5f3c9e2f17c2e303e8c8d4eab


    Code Sign

    Headers

    Imports

    Sections

  • ee29b9c01318a1e23836b949942db14d4811246fdae2f41df9f0dcd922c63bc6.bin.gz
    .gz
  • fe2e5d0543b4c8769e401ec216d78a5a3547dfd426fd47e097df04a5f7d6d206_OFkNP1kKL9.bin.gz
    .gz
  • myguy.hta
    .js
  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Ransomware-Samples-main/Petya/Ransomware.Petya.zip
    .zip
  • Ransomware-Samples-main/README.md
  • Ransomware-Samples-main/Radamant/Ransomware.Radamant.zip
    .zip
  • Ransomware-Samples-main/RedBoot/Ransomware.RedBoot.zip
    .zip
  • Ransomware-Samples-main/Rex/Ransomware.Rex.zip
    .zip
  • Ransomware-Samples-main/Satana/Ransomware.Satana.zip
    .zip
  • Ransomware-Samples-main/TeslaCrypt/Ransomware.TeslaCrypt.zip
    .zip
  • Ransomware-Samples-main/Thanos/Ransomware.Thanos.zip
    .zip
  • Ransomware-Samples-main/Unnamed_0/Ransomware.Unnamed_0.zip
    .zip
  • Ransomware-Samples-main/Vipasana/Ransomware.Vipasana.zip
    .zip
  • Ransomware-Samples-main/WannaCry/Ransomware.WannaCry.zip
    .zip
  • Ransomware-Samples-main/WannaCry_Plus/Ransomware.WannaCry_Plus.zip
    .zip
  • Ransomware-Samples-main/ransomware.png
    .png