Overview

overview

10

Static

static

10

3da65a0e61...0e.exe

windows7-x64

10

3da65a0e61...0e.exe

windows10-2004-x64

10

Ransomware...et.exe

windows7-x64

8

Ransomware...et.exe

windows10-2004-x64

8

Ransomware...er.exe

windows7-x64

1

Ransomware...er.exe

windows10-2004-x64

1

Ransomware/Cerber.exe

windows7-x64

10

Ransomware/Cerber.exe

windows10-2004-x64

10

Ransomware...ks.exe

windows7-x64

1

Ransomware...ks.exe

windows10-2004-x64

1

Ransomware...ER.exe

windows7-x64

10

Ransomware...ER.exe

windows10-2004-x64

10

Ransomware...er.exe

windows7-x64

9

Ransomware...er.exe

windows10-2004-x64

8

Ransomware...ey.exe

windows7-x64

10

Ransomware...ey.exe

windows10-2004-x64

10

Ransomware/Locky.exe

windows7-x64

10

Ransomware/Locky.exe

windows10-2004-x64

10

Ransomware/Matsnu.exe

windows7-x64

7

Ransomware/Matsnu.exe

windows10-2004-x64

3

Ransomware/Rex

ubuntu-18.04-amd64

9

Ransomware...er.exe

windows7-x64

1

Ransomware...er.exe

windows10-2004-x64

1

Ransomware...92.exe

windows7-x64

9

Ransomware...92.exe

windows10-2004-x64

9

Ransomware...ll.exe

windows7-x64

9

Ransomware...ll.exe

windows10-2004-x64

3

Ransomware/eda2.exe

windows7-x64

1

Ransomware/eda2.exe

windows10-2004-x64

1

Ransomware/jigsaw.exe

windows7-x64

10

Ransomware/jigsaw.exe

windows10-2004-x64

10

Ransomware/mamba.exe

windows7-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-03-2024 20:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Ransomware/Matsnu.exe

  • Size

    102KB

  • MD5

    1b2d2a4b97c7c2727d571bbf9376f54f

  • SHA1

    1fc29938ec5c209ba900247d2919069b320d33b0

  • SHA256

    7634433f8fcf4d13fb46d680802e48eeb160e0f51e228cae058436845976381e

  • SHA512

    506fc96423e5e2e38078806591e09a6eb3cf924eb748af528f7315aa0b929890823798a3ef2a5809c14023c3ff8a3db36277bc90c7b099218422aafa4e0c2ee0

  • SSDEEP

    1536:jj+Rj1lGIXKSmE17v97yiqHGMRPtbsLW8/V2k12v1/BDxVyCfCrCAc:jjw6Sf0iqmMnb2W02v3mCf4Nc

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ransomware\Matsnu.exe
    "C:\Users\Admin\AppData\Local\Temp\Ransomware\Matsnu.exe"
    1⤵
      PID:3116
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3116 -s 368
        2⤵
        • Program crash
        PID:548
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3116 -ip 3116
      1⤵
        PID:2708

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads