General
-
Target
7c2dbad516d18d2c1c21ecc5792bc232f7b34dadc1bc19e967190d79174131d1
-
Size
55KB
-
Sample
240704-g1f9vayaqk
-
MD5
a35596ed0bfb34de4e512a3225f8300a
-
SHA1
aeb09e894736cbb41e934f83cca0247fe89d8a19
-
SHA256
7c2dbad516d18d2c1c21ecc5792bc232f7b34dadc1bc19e967190d79174131d1
-
SHA512
e70eccbbe84f933a567b000fceba9666f4537489de0ed21eb3bdaf06cfb61b618be042d566969100907f06ea68aa2da1b84029d94c73f971ea35af9de968e3de
-
SSDEEP
1536:gZVYb2bbBisyEcPC00h7sBvvKk+jTc7+T8l7RJV62CzVDL+oWB27evMCUQ:EV+GiVEc6RsMJQ
Static task
static1
Behavioral task
behavioral1
Sample
7c2dbad516d18d2c1c21ecc5792bc232f7b34dadc1bc19e967190d79174131d1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
7c2dbad516d18d2c1c21ecc5792bc232f7b34dadc1bc19e967190d79174131d1.exe
Resource
win11-20240611-en
Malware Config
Extracted
C:\Users\Admin\3D Objects\read_me.txt
deathransom
Extracted
C:\Users\Admin\AppData\Roaming\read_me.txt
deathransom
Targets
-
-
Target
7c2dbad516d18d2c1c21ecc5792bc232f7b34dadc1bc19e967190d79174131d1
-
Size
55KB
-
MD5
a35596ed0bfb34de4e512a3225f8300a
-
SHA1
aeb09e894736cbb41e934f83cca0247fe89d8a19
-
SHA256
7c2dbad516d18d2c1c21ecc5792bc232f7b34dadc1bc19e967190d79174131d1
-
SHA512
e70eccbbe84f933a567b000fceba9666f4537489de0ed21eb3bdaf06cfb61b618be042d566969100907f06ea68aa2da1b84029d94c73f971ea35af9de968e3de
-
SSDEEP
1536:gZVYb2bbBisyEcPC00h7sBvvKk+jTc7+T8l7RJV62CzVDL+oWB27evMCUQ:EV+GiVEc6RsMJQ
Score10/10-
DeathRansom
Ransomware family first seen at the start of 2020. Initial versions did not actually encrypt files.
-
Renames multiple (155) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-