Overview

overview

10

Static

static

3

2024-06-07...uk.exe

windows7-x64

7

2024-06-07...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-07_ccf28af40d78acf12f05894559150e70_ryuk

  • Size

    11.9MB

  • Sample

    240607-cq2qkshb44

  • MD5

    ccf28af40d78acf12f05894559150e70

  • SHA1

    8165f8862c491731cf1adeb9469ee5cdd7b9e650

  • SHA256

    cdf13eedd60a35d7ed8f74721e36c8f77505fc4da9ec6ae34c0f4e47f73c590d

  • SHA512

    5c5aa1e6d6540568b31b85d8c8d6d2e4ffaea8e211575a4ccdfccebae349a5ab95fce23d64aa18c14d407af83880e7f2a9cc071eb919ef42ac11fec85500e817

  • SSDEEP

    196608:ybOOqTXrTaXPA4pzxw9BK+gpvDq9onJ5hrZER5xQ3jo4U648RmU/3ZlsPvt7+sTa:HTXafVxw9BKpbq9c5hlER5xA26tN3ZWp

Score
10/10
demonwarepyinstallerransomware

Malware Config

Extracted

Path

C:\Users\Admin\Pictures\README.txt

Ransom Note
Your personal files are encrypted by Nagini-Locker. What happened to my computer? [!] Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. [!] Private decryption key is stored on a secret internet server and nobody can decrypt your files until you pay and obtain the private key. [!] You have only 72 hours to submit the payment. If you do not send the money within provided time, all your files will be permanently crypted and leaked on internet. How do i pay? [!] Send 0.01 BTC to this Bitcoin adress [!] 3DfRZMeEAEuD1pjMrE8P4VnPBB863oebHn How to buy bitcoin? [!] www.coinbase.com [!] www.bitcoin.org How can i recover my files? [!] After your payment, contact us at [email protected] to get your decryption key. Nagini.
Wallets

3DfRZMeEAEuD1pjMrE8P4VnPBB863oebHn

Targets

    • Target

      2024-06-07_ccf28af40d78acf12f05894559150e70_ryuk

    • Size

      11.9MB

    • MD5

      ccf28af40d78acf12f05894559150e70

    • SHA1

      8165f8862c491731cf1adeb9469ee5cdd7b9e650

    • SHA256

      cdf13eedd60a35d7ed8f74721e36c8f77505fc4da9ec6ae34c0f4e47f73c590d

    • SHA512

      5c5aa1e6d6540568b31b85d8c8d6d2e4ffaea8e211575a4ccdfccebae349a5ab95fce23d64aa18c14d407af83880e7f2a9cc071eb919ef42ac11fec85500e817

    • SSDEEP

      196608:ybOOqTXrTaXPA4pzxw9BK+gpvDq9onJ5hrZER5xQ3jo4U648RmU/3ZlsPvt7+sTa:HTXafVxw9BKpbq9c5hlER5xA26tN3ZWp

    Score
    10/10
    demonwareransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks