General

  • Target

    Ransomware-master.zip

  • Size

    12.9MB

  • MD5

    fbe4bb6ec3dd8332e9edb0e74c3136b6

  • SHA1

    43e8076cbc4729f0052e5bb62ac02c7720a97b61

  • SHA256

    8435c51115f7517e00f8d016ed41ba9182fa75a9d549bd67fbaf8ae2b68dd91d

  • SHA512

    4f5c1ba196e2e00f918351f8a687a12a4b54ab77534d34dc7e0df7b4872c8a2032610a230e501af863c68f93a906d2b8a00c10d5ba95e4d5756c8c0a44771abe

  • SSDEEP

    393216:VRaJ7k2nfFSrjIwVsmu/GyBSAb+JYSWTmY:VRaLnnxmk3bDSW1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Ransomware-master.zip
    .zip
  • Ransomware-master/LICENSE
  • Ransomware-master/README.md
  • Ransomware-master/Ransomware
  • Ransomware-master/etc/Ransomware.Cerber.zip
    .zip

    Password: infected

  • cerber.exe
    .exe windows:5 windows x86 arch:x86

    9d6ed8d049bc10bc45b1995cb6f7f4b6


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Cryptowall.zip
    .zip

    Password: infected

  • cryptowall.bin
    .exe windows:5 windows x86 arch:x86

    edbc0337cc897a187d263d79c09c15c7


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Jigsaw.zip
    .zip

    Password: infected

  • jigsaw
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Locky.zip
    .zip

    Password: infected

  • Locky
    .exe windows:4 windows x86 arch:x86

    0fcea3af550ad0a893e93808dccf17f4


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Mamba.zip
    .zip

    Password: infected

  • 131.exe
    .exe windows:5 windows x86 arch:x86

    dd8fd079a980cb9227eb869f7da9b258


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Matsnu.zip
    .zip

    Password: infected

  • Matsnu-MBRwipingRansomware_1B2D2A4B97C7C2727D571BBF9376F54F_Inkasso Rechnung vom 27.05.2013 .com_
    .exe windows:5 windows x86 arch:x86

    bd52eaa585e8f1c2fba85e8df7a2e191


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Petrwrap.zip
    .zip

    Password: infected

  • 027cc450ef5f8c5f653329641ec1fed9.exe
    .dll windows:5 windows x86 arch:x86

    52dd60b5f3c9e2f17c2e303e8c8d4eab


    Code Sign

    Headers

    Imports

    Sections

  • 027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.bin.gz
    .gz
  • 027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.bin
    .dll windows:5 windows x86 arch:x86

    52dd60b5f3c9e2f17c2e303e8c8d4eab


    Code Sign

    Headers

    Imports

    Sections

  • ee29b9c01318a1e23836b949942db14d4811246fdae2f41df9f0dcd922c63bc6.bin.gz
    .gz
  • fe2e5d0543b4c8769e401ec216d78a5a3547dfd426fd47e097df04a5f7d6d206_OFkNP1kKL9.bin.gz
    .gz
  • myguy.hta
    .js
  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Ransomware-master/etc/Ransomware.Petya.zip
    .zip
  • Ransomware-master/etc/Ransomware.Radamant.zip
    .zip
  • Ransomware-master/etc/Ransomware.Rex.zip
    .zip
  • Ransomware-master/etc/Ransomware.Satana.zip
    .zip
  • Ransomware-master/etc/Ransomware.TeslaCrypt.zip
    .zip
  • Ransomware-master/etc/Ransomware.Vipasana.zip
    .zip
  • Ransomware-master/etc/Ransomware.WannaCry.zip
    .zip
  • Ransomware-master/etc/Ransomware.Wannacry_Plus.zip
    .zip
  • Ransomware-master/etc/Ransomware.library
  • Ransomware-master/etc/load.sh
    .sh .ps1
  • Ransomware-master/test.py
  • Ransomware-master/test2.py
  • Ransomware-master/warna.py