demonware | 9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06 | Triage

Submit
Reports

Overview

overview

Static

static

3

a951114074...18.exe

windows7-x64

a951114074...18.exe

windows10-2004-x64

Sharing

General

Target

a95111407437bd851ae651f847b53e90_JaffaCakes118
Size

25.7MB
Sample

240614-m3fnzs1fqj
MD5

a95111407437bd851ae651f847b53e90
SHA1

1b45a51068c128fb97883a671c68cf17b02d2e29
SHA256

9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06
SHA512

18474827161b6e722db1b561171d96bc7d47e3e3f8a0e2bd416b540bdd8d8a3fe772ba7c24f3ad83a0aa3e45008d937a03ce0e0fb6786833da0397396b19cce7
SSDEEP

393216:FcjRh0jlscHVAD5wjcTy5AwJ5ShR4uwcI5Hq3CFDDAQWp15O8626Q7RhJzxeT:sh0jlT1AD5RTAvQ2BHKDdLcBQ7b1g

Score

10^/10

demonware pyinstaller ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

a95111407437bd851ae651f847b53e90_JaffaCakes118.exe

Resource

win7-20240508-en

demonware ransomware

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

a95111407437bd851ae651f847b53e90_JaffaCakes118.exe

Resource

win10v2004-20240611-en

demonware ransomware

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  a95111407437bd851ae651f847b53e90_JaffaCakes118
- Size
  
  25.7MB
- MD5
  
  a95111407437bd851ae651f847b53e90
- SHA1
  
  1b45a51068c128fb97883a671c68cf17b02d2e29
- SHA256
  
  9211217318a47e3e7fb79f3edf426088a8029c9d44fc9c77ca9dcf4fb1a67e06
- SHA512
  
  18474827161b6e722db1b561171d96bc7d47e3e3f8a0e2bd416b540bdd8d8a3fe772ba7c24f3ad83a0aa3e45008d937a03ce0e0fb6786833da0397396b19cce7
- SSDEEP
  
  393216:FcjRh0jlscHVAD5wjcTy5AwJ5ShR4uwcI5Hq3CFDDAQWp15O8626Q7RhJzxeT:sh0jlT1AD5RTAvQ2BHKDdLcBQ7b1g
Score

10^/10

demonware ransomware
- DemonWare
  Ransomware first seen in mid-2020.
  ransomware demonware
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

demonwareransomware

behavioral2

demonwareransomware

© 2018-2024

Terms | Privacy