Overview

overview

10

Static

static

3

Ransom.Win...wn.vbs

windows7-x64

Ransom.Win...wn.vbs

windows10-ltsc 2021-x64

Ransom.Win...rX.vbs

windows7-x64

10

Ransom.Win...rX.vbs

windows10-ltsc 2021-x64

10

other malw...0r.exe

windows7-x64

10

other malw...0r.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ransom.Win32.LCrypt0rX.zip

  • Size

    3.3MB

  • MD5

    20697ea483fa25e4c623d7df8a93a07a

  • SHA1

    cba0af992ae9dd0331dcd3a01affe919e681c8d5

  • SHA256

    c37651558d3b87df699354c3d54af3a6958ab7f9a4810387e5fbea1e58bf20cf

  • SHA512

    2e80dfdcc1ffd0d18b246b1f78ded24dfa202eab3ccdb5f24b35445f27d19dd75fc03e5abc22fc567958f7e25a1d9d2108b4ce6163642a54d5f4896209901ea5

  • SSDEEP

    98304:D5NNAWLPBOJlC9urQS//nSNLagcXOIARd7WIw52I7r:1zQJ09urQSyfcXMRw1X

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ransom.Win32.LCrypt0rX.zip
    .zip

    Password: VBSFileEncrypt

  • PASSWORD_VBSFileEncrypt
  • PLEASE READ ME.txt
  • Ransom.Win32.LCrypt0rX.A/LCrypt0rX with shutdown.vbs
    .vbs
  • Ransom.Win32.LCrypt0rX.A/LCrypt0rX.vbs
    .vbs
  • other malware cuz why not/[email protected]
    .exe windows:4 windows x86 arch:x86

    Password: VBSFileEncrypt

    68f013d7437aa653a8a98a05807afeb1


    Headers

    Imports

    Sections

  • other malware cuz why not/loveletterworm.vbs
    .vbs