Extracted

Extracted

Extracted

• • Target

    The-MALWARE-Repo-master/Ransomware/PowerPoint.exe

  • Size

    136KB

  • MD5

    70108103a53123201ceb2e921fcfe83c

  • SHA1

    c71799a6a6d09ee758b04cdf90a4ab76fbd2a7e3

  • SHA256

    9c3f8df80193c085912c9950c58051ae77c321975784cc069ceacd4f57d5861d

  • SHA512

    996701c65eee7f781c2d22dce63f4a95900f36b97a99dcf833045bce239a08b3c2f6326b3a808431cdab92d59161dd80763e44126578e160d79b7095175d276b

  • SSDEEP

    1536:3VrdxBvcGdDHHtWv8udA1JYREgJ/qEOpsChnU4V1lyqHv4vAmOG9HSDKRppppp5B:1H5D0dSgo7ppTV1lyqPOAmOG9HSOD

  Score

  7^/10

  bootkitdiscoverypersistence

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1

• • Target

    The-MALWARE-Repo-master/Trojan/LoveYou.exe

  • Size

    22KB

  • MD5

    31420227141ade98a5a5228bf8e6a97d

  • SHA1

    19329845635ebbc5c4026e111650d3ef42ab05ac

  • SHA256

    1edc8771e2a1a70023fc9ddeb5a6bc950380224b75e8306eb70da8eb80cb5b71

  • SHA512

    cbb18a6667b377eb68395cfd8df52b7d93c4554c3b5ab32c70e73b86e3dedb7949122fe8eea9530cd53944b45a1b699380bf1e9e5254af04d8409c594a52c0e7

  • SSDEEP

    384:o4LBivz/4RHCxN3IBUDzfGWCw2cKgDwg7dEsL9s+cLUoHl:o4LBu74Ro9ImnfGWJ2cKgsgZDW+cLUe

  Score

  1^/10
  behavioral2

• • Target

    The-MALWARE-Repo-master/Trojan/MEMZ.exe

  • Size

    14KB

  • MD5

    19dbec50735b5f2a72d4199c4e184960

  • SHA1

    6fed7732f7cb6f59743795b2ab154a3676f4c822

  • SHA256

    a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d

  • SHA512

    aa8a6bbb1ec516d5d5acf8be6863a4c6c5d754cee12b3d374c3a6acb393376806edc422f0ffb661c210e5b9485da88521e4a0956a4b7b08a5467cfaacd90591d

  • SSDEEP

    192:sIvxdXSQeWSg9JJS/lcIEiwqZKBkDFR43xWTM3LHn8f26gyr6yfFCj3r:sMVSaSEglcIqq3agmLc+6gyWqFCj

  Score

  6^/10

  bootkitdiscoverypersistence

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral3

• • Target

    The-MALWARE-Repo-master/Virus/WinNuke.98.exe

  • Size

    32KB

  • MD5

    eb9324121994e5e41f1738b5af8944b1

  • SHA1

    aa63c521b64602fa9c3a73dadd412fdaf181b690

  • SHA256

    2f1f93ede80502d153e301baf9b7f68e7c7a9344cfa90cfae396aac17e81ce5a

  • SHA512

    7f7a702ddec8d94cb2177b4736d94ec53e575be3dd2d610410cb3154ba9ad2936c98e0e72ed7ab5ebbcbe0329be0d9b20a3bcd84670a6d1c8d7e0a9a3056edd2

  • SSDEEP

    384:4cr14oKDP9KDviKDeTngwz9zmDAQE4KDJKDv5KDPP4vWe:92FgwBzMAbb3

  Score

  1^/10
  behavioral4