439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d.zip
- SHA256 439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d
Overview
overview
10Static
static
3main.exe
windows7-x64
1main.exe
windows10-2004-x64
1ransom.exe
windows7-x64
10ransom.exe
windows10-2004-x64
10key_gen/main.exe
windows7-x64
1key_gen/main.exe
windows10-2004-x64
1key_gen/ransom.exe
windows7-x64
9key_gen/ransom.exe
windows10-2004-x64
9ransom/Rel...om.exe
windows7-x64
6ransom/Rel...om.exe
windows10-2004-x64
6ransom/ran...ts.vbs
windows7-x64
1ransom/ran...ts.vbs
windows10-2004-x64
1ransom/ran...hic.js
windows7-x64
3ransom/ran...hic.js
windows10-2004-x64
3ransom/ran...som.js
windows7-x64
3ransom/ran...som.js
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ransom.exe
Resource
win7-20241023-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
ransom.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
key_gen/main.exe
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
key_gen/main.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
key_gen/ransom.exe
Resource
win7-20241010-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral8
Sample
key_gen/ransom.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral9
Sample
ransom/Release/ransom.exe
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral10
Sample
ransom/Release/ransom.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral11
Sample
ransom/ransom/Crypto/RSA/bigdigits.vbs
Resource
win7-20241023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
ransom/ransom/Crypto/RSA/bigdigits.vbs
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
ransom/ransom/Cryptographic.js
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
ransom/ransom/Cryptographic.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
ransom/ransom/ransom.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
ransom/ransom/ransom.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d.zip
- Size 10.0MB
- Sample241106-cztrbstepk
- SHA256 439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d
- MD5 0739c5c628cd9827ad276fcdeab6866d
- SHA1 d35da3f4e36eebf36a130bc7e0182fc4c35cf551
- SHA512 cbcc268a6ffd1d7da8454d9d19e5dadff2f6b82f7a24c71c600af9a1df43cd94c01189d5e6536058238ee3941cc263ba36b91bebb7cd9a46d2bc7a8af8975a8e
- SSDEEP 196608:E41NwEkT12Yfagn1Xii8ag+1LH7oChw7nyHcJQTUqFXPRmehiK1oCu4Wm1sSS:EaNwz26JRxn1oChw7ny8JnIpmecKuchU
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack002/main.exe unpack002/ransom.exe unpack001/key_gen/main.exe unpack001/key_gen/ransom.exe unpack001/ransom/Release/ransom.exe
File Explorer
-
439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d.zip.zip 10.0MB
-
key_gen/key_gen.zip.zip 3.4MB
-
main.exe.exe 1.5MB
-
ransom.exe.exe 7.8MB
-
rsa.txt4KB
-
key_gen/main.cpp7KB
-
key_gen/main.exe.exe 1.5MB
-
key_gen/ransom.exe.exe 6.4MB
-
key_gen/rsa.txt4KB
-
ransom/Release/ransom.exe.exe 6.4MB
-
ransom/ransom.sln1KB
-
ransom/ransom/Crypto/AES/aes.cpp28KB
-
ransom/ransom/Crypto/AES/aes.h684B
-
ransom/ransom/Crypto/RSA/bigd.cpp29KB
-
ransom/ransom/Crypto/RSA/bigd.h11KB
-
ransom/ransom/Crypto/RSA/bigdigits.cpp.vbs 63KB
-
ransom/ransom/Crypto/RSA/bigdigits.h11KB
-
ransom/ransom/Crypto/RSA/bigdtypes.h2KB
-
ransom/ransom/Crypto/RSA/rsa.cpp9KB
-
ransom/ransom/Crypto/RSA/rsa.h1KB
-
ransom/ransom/Cryptographic.cpp.js 14KB
-
ransom/ransom/Cryptographic.h1KB
-
ransom/ransom/Debug/Cryptographic.obj94KB
-
ransom/ransom/Debug/aes.obj32KB
-
ransom/ransom/Debug/bigd.obj91KB
-
ransom/ransom/Debug/bigdigits.obj129KB
-
ransom/ransom/Debug/ransom.exe.recipe289B
-
ransom/ransom/Debug/ransom.ilk3.1MB
-
ransom/ransom/Debug/ransom.log191B
-
ransom/ransom/Debug/ransom.obj145KB
-
ransom/ransom/Debug/ransom.obj.enc147KB
-
ransom/ransom/Debug/ransom.res7.6MB
-
ransom/ransom/Debug/ransom.tlog/CL.command.1.tlog4KB
-
ransom/ransom/Debug/ransom.tlog/CL.read.1.tlog99KB
-
ransom/ransom/Debug/ransom.tlog/CL.write.1.tlog3KB
-
ransom/ransom/Debug/ransom.tlog/Cl.items.tlog666B
-
ransom/ransom/Debug/ransom.tlog/link.command.1.tlog1KB
-
ransom/ransom/Debug/ransom.tlog/link.read.1.tlog4KB
-
ransom/ransom/Debug/ransom.tlog/link.secondary.1.tlog437B
-
ransom/ransom/Debug/ransom.tlog/link.write.1.tlog958B
-
ransom/ransom/Debug/ransom.tlog/ransom.lastbuildstate161B
-
ransom/ransom/Debug/ransom.tlog/rc.command.1.tlog326B
-
ransom/ransom/Debug/ransom.tlog/rc.read.1.tlog2KB
-
ransom/ransom/Debug/ransom.tlog/rc.write.1.tlog210B
-
ransom/ransom/Debug/rsa.obj27KB
-
ransom/ransom/Debug/vc143.idb507KB
-
ransom/ransom/Debug/vc143.pdb340KB
-
ransom/ransom/Release/Cryptographic.obj373KB
-
ransom/ransom/Release/aes.obj51KB
-
ransom/ransom/Release/bigd.obj148KB
-
ransom/ransom/Release/bigdigits.obj263KB
-
ransom/ransom/Release/ransom.Build.CppClean.log1KB
-
ransom/ransom/Release/ransom.exe.recipe298B
-
ransom/ransom/Release/ransom.iobj74KB
-
ransom/ransom/Release/ransom.log661B
-
ransom/ransom/Release/ransom.obj789KB
-
ransom/ransom/Release/ransom.res6.2MB
-
ransom/ransom/Release/ransom.tlog/CL.command.1.tlog8KB
-
ransom/ransom/Release/ransom.tlog/CL.read.1.tlog100KB
-
ransom/ransom/Release/ransom.tlog/CL.write.1.tlog2KB
-
ransom/ransom/Release/ransom.tlog/Cl.items.tlog762B
-
ransom/ransom/Release/ransom.tlog/link.command.1.tlog3KB
-
ransom/ransom/Release/ransom.tlog/link.read.1.tlog7KB
-
ransom/ransom/Release/ransom.tlog/link.secondary.1.tlog510B
-
ransom/ransom/Release/ransom.tlog/link.write.1.tlog1KB
-
ransom/ransom/Release/ransom.tlog/ransom.lastbuildstate170B
-
ransom/ransom/Release/ransom.tlog/rc.command.1.tlog686B
-
ransom/ransom/Release/ransom.tlog/rc.read.1.tlog5KB
-
ransom/ransom/Release/ransom.tlog/rc.write.1.tlog454B
-
ransom/ransom/Release/rsa.obj116KB
-
ransom/ransom/bitmap1.bmp263KB
-
ransom/ransom/bmp00001.bmp5.9MB
-
ransom/ransom/ransom.aps6.2MB
-
ransom/ransom/ransom.cpp.js 21KB
-
ransom/ransom/ransom.rc5KB
-
ransom/ransom/ransom.vcxproj.xml 8KB
-
ransom/ransom/ransom.vcxproj.filters2KB
-
ransom/ransom/ransom.vcxproj.user226B
-
ransom/ransom/resource.h861B
-
ransom/ransom/x64/Debug/Cryptographic.obj101KB
-
ransom/ransom/x64/Debug/aes.obj38KB
-
ransom/ransom/x64/Debug/bigd.obj105KB
-
ransom/ransom/x64/Debug/bigdigits.obj149KB
-
ransom/ransom/x64/Debug/ransom.log331B
-
ransom/ransom/x64/Debug/ransom.tlog/CL.command.1.tlog3KB
-
ransom/ransom/x64/Debug/ransom.tlog/CL.read.1.tlog60KB
-
ransom/ransom/x64/Debug/ransom.tlog/CL.write.1.tlog2KB
-
ransom/ransom/x64/Debug/ransom.tlog/ransom.lastbuildstate159B
-
ransom/ransom/x64/Debug/rsa.obj31KB
-
ransom/ransom/x64/Debug/vc143.idb411KB
-
ransom/ransom/x64/Debug/vc143.pdb282KB
-
ransom/ransom/x64/Release/Cryptographic.obj283KB
-
ransom/ransom/x64/Release/aes.obj51KB
-
ransom/ransom/x64/Release/bigd.obj133KB
-
ransom/ransom/x64/Release/bigdigits.obj243KB
-
ransom/ransom/x64/Release/ransom.Build.CppClean.log447B
-
ransom/ransom/x64/Release/ransom.log4KB
-
ransom/ransom/x64/Release/ransom.tlog/CL.command.1.tlog1KB
-
ransom/ransom/x64/Release/ransom.tlog/ransom.lastbuildstate161B
-
ransom/ransom/x64/Release/rsa.obj103KB
-
ransom/ransom/x64/Release/vc143.pdb258KB
key_gen/key_gen.zip
- SHA256 ed6c889c833ba5a210bd5c535564ef185b014a34397bbb8b91c7be890f16fe88
- MD5 492b51d4b15af7645426d5e919c76173
- SHA1 dd39a5cbb2f4fff512f5fc1731de2b0a895a9ffe
- SHA512 29f62654d5943485d0f6e7266f3ae3284640afcab72976a5baa545484fd83d1ef0080236a7f399e3b71d894a2a4db80434721cea4acee92196cd2d70ab0438a3
- SSDEEP 98304:lniNu+2LdiGKVLkT1WXo4a9fagVeE1Gkiw:4NwEkT12Yfagn1Xiw
- MD5 SHA1 SHA512 SSDEEP
main.exe
- IMPHASH b6f255793d9218bffb1d265f125394e6
- SHA256 60e2a4abcb80b43e6d2f04ea9a45a84b0a2fb0d238ae1a28eff6635527058362
- MD5 35815ae7affca262bcd6beabbdadebfd
- SHA1 a9c0b358729aa7b383535b3e36d9cd5a8cb3bfd0
- SHA512 edd4559c049ee1acb4208139c45db43ca9b20591cd97bacebef7e800ac92e8c84cc4050bf0ef9f6ffc18d84d40242f494f28da69ee4e0139a37fb69c7e97bef1
- SSDEEP 24576:TGuYQmUMWFV3QLXPOq9oVRHN2SSl7Ewf8JsU3Aot+Ec0xMkiqqIkFyBM2:quYQmUMqQLXPOqcUlgUqqIkFyBM2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_fmode
_ftime
_initterm
_lock
_onexit
_setjmp
_strnicmp
_unlock
_time64
_write
abort
calloc
exit
fclose
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
rand
realloc
rewind
setlocale
signal
sprintf
srand
strcat
strcmp
strcoll
strerror
strftime
strlen
strncmp
strncpy
strxfrm
towlower
towupper
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
Name
.text
Size
358KB
Virtual Size
358KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
129KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ransom.exe
- IMPHASH f032b4cc0eb4f2eac3f528efe4c73962
- SHA256 102276ae1f518745695fe8f291bf6e69856b91723244881561bb1a2338d54b12
- MD5 648bd793d9e54fc2741e0ba10980c7de
- SHA1 f5d0c94b2be91342dc01ecf2f89e7e6f21a74b90
- SHA512 d1428b934a360d7f3651947d11081892c93c7cd29a17dc38190cbb46c95939928ac6f805adf586be2937e27fc20aec8bd1fc2c782c681e7e94e9e8d33b8ebf15
- SSDEEP 98304:9+v9K8MgmB4oIWcCJ3ZZVL8oYi5lTkZkmla1DXL:S4uWcCT9Gzl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4999
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
EndPaint
GetWindowLongW
PostMessageW
SetWindowPos
EndDialog
GetSystemMetrics
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
DrawTextA
CloseClipboard
EmptyClipboard
MessageBoxA
LoadBitmapW
SetClipboardData
wsprintfW
GetDlgItem
SetRect
KillTimer
SystemParametersInfoW
DialogBoxParamW
FindWindowA
LoadImageW
InvalidateRect
BeginPaint
MessageBoxW
gdi32
BitBlt
CreateFontA
SelectObject
CreateCompatibleDC
DeleteDC
SetTextColor
SetBkMode
GetObjectW
DeleteObject
shell32
SHGetFolderPathA
kernel32
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileSizeEx
FreeEnvironmentStringsW
MultiByteToWideChar
LCMapStringW
CompareStringW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
WideCharToMultiByte
SetUnhandledExceptionFilter
HeapFree
GetLastError
SizeofResource
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
GetTempPathW
FindClose
CreateFileW
GetSystemDirectoryW
FreeResource
Sleep
LockResource
GlobalAlloc
CloseHandle
CreateThread
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GetConsoleWindow
GlobalUnlock
GetDriveTypeW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
DecodePointer
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
HeapAlloc
RaiseException
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
SetEndOfFile
SetFilePointerEx
DeleteFileW
ReadFile
GetConsoleMode
ReadConsoleW
GetFileType
GetConsoleOutputCP
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
SetStdHandle
Name
.text
Size
134KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7.6MB
Virtual Size
7.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=30795,
count=160, id=261, version=30795,
count=20, id=260, version=30795,
count=9, id=257, version=30795,
count=136, id=1, productName=Unmarked objects,
count=41, id=261, version=33218,
count=19, id=260, version=33218,
count=21, id=259, version=33218,
count=6, id=265, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
rsa.txt
- SHA256 14c93bd3e40fa06333ac98f54f892e90a1f59c4d5d3beb0b3b76746e85f904d4
- MD5 e3734d2fd9414cca824e76aa53525a0e
- SHA1 387a53239653ec8e6e6e18618fd88503c60a8809
- SHA512 8fb94588c3437758c88016d3cc52fe719dc266aae5525adc0f7d96ec09e172ee2b1db5702e0d804f0238c2d1859e63e4685aaf05debcd50428bad2de3c6de28c
- SSDEEP 96:uREP07n4qEGB+CcbDLam5CQSkjVCqGkXo0pRGV8n42Y6SGMqu:2EPqn44hcbDLamAQVYgo84GSGMqu
- MD5 SHA1 SHA512 SSDEEP
key_gen/main.cpp
- SHA256 29dce07bd046be7582abd1e7db564406f3aefb98715920ee66d436d69975f874
- MD5 39d75a7a6e3135290f8951dd18a05815
- SHA1 d24907a542046fc8d545a3d6fa9a5e24c2eef6ba
- SHA512 5af22ec866c9f4183ab34234e035cd41a63b962e72499bdb154d1ee3c7d49b4af9894345690012d61b9ce38f26546d120f1512816e13d9d694ff2ccd3125122b
- SSDEEP 96:AufL1tdbm7djGr7WDxP1Hb0BljBR+pcrstFO9Oj3Ojn9vcP9BOAhdMGSed7eOT+D:9LAdgWDxNSicaHD4c7V+R6Pk+2RTh
- MD5 SHA1 SHA512 SSDEEP
key_gen/main.exe
- IMPHASH b6f255793d9218bffb1d265f125394e6
- SHA256 2bed83dc64f3163f6239c4e744285c2e4aebaf6720aef92ae2c3de17e1dee591
- MD5 7eb6773d9638b1d263d834929ec60b0a
- SHA1 159e04e548929ea4a25d0e49577db437f2b91f6b
- SHA512 9f20f69baba59e5b54ca64dac8646a829f8123153879320d51e54829ff614b1c4db0ea527e712c2abab5ce15d080d9d6343632cdf50f0090b1cd6ba45cfb84e1
- SSDEEP 24576:nGuYQmUMWFV3QLXPOq9oVRHN2SSl7Ewf8JsU3Aot+Ec0xMkiqqIkFyBM2:GuYQmUMqQLXPOqcUlgUqqIkFyBM2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_fmode
_ftime
_initterm
_lock
_onexit
_setjmp
_strnicmp
_unlock
_time64
_write
abort
calloc
exit
fclose
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
rand
realloc
rewind
setlocale
signal
sprintf
srand
strcat
strcmp
strcoll
strerror
strftime
strlen
strncmp
strncpy
strxfrm
towlower
towupper
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
Name
.text
Size
358KB
Virtual Size
358KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
129KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
key_gen/ransom.exe
- IMPHASH cb6abf8f920e409d66e2c6e1dea5c53e
- SHA256 1363c8871061ff83ed3dd0fe025b274442d5c30898c02bdfd4981717f4f33b44
- MD5 38fb9ac2e51d04182faf81afbef08ab8
- SHA1 1f325950a7a8e1a2050e954f33d2c3774510bd6e
- SHA512 8af5062d6d133379b0ad87439cdf99fc98bff266f03c0a831f84c0c41224c7a97e8e0a5583e8d4b24c04edd0bc6099646ebea3388ffe2fe7917b709604e63406
- SSDEEP 6144:iODh8y70MgJ+j2ZsKmj82uGBOOGHO0GL2g6VzxazESJx2sYMLoI4H4voKJ+QtDeJ:ik70MZMc0RdQtzH8lhwFbZgaOm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4967
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
EndPaint
GetWindowLongW
PostMessageW
SetWindowPos
FillRect
GetSystemMetrics
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
DrawTextA
CloseClipboard
EmptyClipboard
MessageBoxA
LoadBitmapW
SetLayeredWindowAttributes
SetClipboardData
wsprintfW
SetWindowLongW
GetClientRect
GetDlgItem
SetRect
KillTimer
SystemParametersInfoW
DialogBoxParamW
FindWindowA
LoadImageW
InvalidateRect
BeginPaint
MessageBoxW
gdi32
BitBlt
CreateCompatibleBitmap
CreateFontA
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
DeleteDC
SetTextColor
TextOutA
SetBkMode
GetObjectW
DeleteObject
CreateSolidBrush
shell32
SHGetFolderPathA
kernel32
FindFirstFileExW
GetFileSizeEx
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
GetCurrentProcessId
SetStdHandle
GetCommandLineW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SizeofResource
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
GetTempPathW
FindClose
CreateFileW
GetSystemDirectoryW
FreeResource
Sleep
LockResource
GlobalAlloc
CloseHandle
CreateThread
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GetConsoleWindow
WinExec
GlobalUnlock
GetDriveTypeW
QueryPerformanceCounter
DecodePointer
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
SetEndOfFile
SetFilePointerEx
ReadFile
GetConsoleMode
ReadConsoleW
GetFileType
GetConsoleOutputCP
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
Name
.text
Size
134KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6.2MB
Virtual Size
6.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=30795,
count=160, id=261, version=30795,
count=20, id=260, version=30795,
count=9, id=257, version=30795,
count=147, id=1, productName=Unmarked objects,
count=41, id=261, version=33218,
count=19, id=260, version=33218,
count=21, id=259, version=33218,
count=6, id=265, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
key_gen/rsa.txt
- SHA256 14c93bd3e40fa06333ac98f54f892e90a1f59c4d5d3beb0b3b76746e85f904d4
- MD5 e3734d2fd9414cca824e76aa53525a0e
- SHA1 387a53239653ec8e6e6e18618fd88503c60a8809
- SHA512 8fb94588c3437758c88016d3cc52fe719dc266aae5525adc0f7d96ec09e172ee2b1db5702e0d804f0238c2d1859e63e4685aaf05debcd50428bad2de3c6de28c
- SSDEEP 96:uREP07n4qEGB+CcbDLam5CQSkjVCqGkXo0pRGV8n42Y6SGMqu:2EPqn44hcbDLamAQVYgo84GSGMqu
- MD5 SHA1 SHA512 SSDEEP
ransom/Release/ransom.exe
- IMPHASH 51ff6eea1c2dfc853310904ce154f487
- SHA256 e26db13a9660555448acb7591f382b480b0252d19e3ad6c6678ba5e1f03d6458
- MD5 626fab8275d8d8e841bc9a08b208201e
- SHA1 197d5c9c5cbf53ed3e78d53a008b6ad665fa3e4c
- SHA512 e106cf78731d9a8e75b5e76ecf881bb12262f13b05b805e89f3bede061a4a1ebb738d7a7631fb51801d95717ca34dabb12f7ed4826e6812ceadb0bad98fcb0d0
- SSDEEP 6144:o3j7hJkMepmEfZsVOM7pNbDMuoKJ+QtDeQYizHMTlaw81FRx3JmfBcOmg:o3nkMS2R6RdQtzH8lhwFbZgaOm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4967
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
EndPaint
GetWindowLongW
PostMessageW
SetWindowPos
FillRect
GetSystemMetrics
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
DrawTextA
CloseClipboard
EmptyClipboard
MessageBoxA
LoadBitmapW
SetLayeredWindowAttributes
SetClipboardData
wsprintfW
SetWindowLongW
GetClientRect
GetDlgItem
SetRect
KillTimer
SystemParametersInfoW
DialogBoxParamW
FindWindowA
LoadImageW
InvalidateRect
BeginPaint
MessageBoxW
gdi32
BitBlt
CreateCompatibleBitmap
CreateFontA
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
DeleteDC
SetTextColor
TextOutA
SetBkMode
GetObjectW
DeleteObject
CreateSolidBrush
shell32
SHGetFolderPathA
kernel32
FindFirstFileExW
GetFileSizeEx
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
GetCurrentProcessId
SetStdHandle
GetCommandLineW
GetFileAttributesW
DeleteFileW
SizeofResource
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
GetTempPathW
FindClose
CreateFileW
GetSystemDirectoryW
FreeResource
Sleep
LockResource
GlobalAlloc
CloseHandle
CreateThread
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GetConsoleWindow
WinExec
GlobalUnlock
GetDriveTypeW
QueryPerformanceCounter
DecodePointer
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
SetEndOfFile
SetFilePointerEx
ReadFile
GetConsoleMode
ReadConsoleW
GetFileType
GetConsoleOutputCP
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
Name
.text
Size
127KB
Virtual Size
127KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6.2MB
Virtual Size
6.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=30795,
count=160, id=261, version=30795,
count=20, id=260, version=30795,
count=9, id=257, version=30795,
count=147, id=1, productName=Unmarked objects,
count=41, id=261, version=33218,
count=19, id=260, version=33218,
count=21, id=259, version=33218,
count=6, id=265, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
ransom/ransom.sln
- SHA256 078ab065521f95f06d98c129bcf8176ed99603085d7ef3c82bc763f27c7a6f71
- MD5 c34b7a9078774e6700b38cba4263b5ce
- SHA1 b54962ccaa4948ea42927879f12e14580ca2a347
- SHA512 6b0fca1836934805078ebd305e176e2bfeb0639ac0cbd517f480d8a2564c22c8cde7bdb19270d782df881d4f69d537ea85cfdc84397c6212b4559f66df3343bc
- MD5 SHA1 SHA512
ransom/ransom/Crypto/AES/aes.cpp
- SHA256 9fa5c5e9d97083b52d25895b46e956fff8874ac33ddb6487c4b661be77c9cbc9
- MD5 efa574c98e213d3930cae0d3db0ef0d8
- SHA1 e7127b539b3ff51a10e74f7c6531a3127eca7ac7
- SHA512 35bc64425b42b2bfdc6712b03ff30fd0c6ee8691974bf0a8247ffd20cab9ec8dfde71f2e5da53b693f773357136e2800d587823b1997646d375373e38dc214d4
- SSDEEP 384:jA7usE5FGSKBi4ndfvTuBd4frVH6cKoZ4Ip/ukSIJey9D:jA7uZinTuBdkV6I448I0SD
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Crypto/AES/aes.h
- SHA256 2d67c15c3ec6cba08acdf8b1183392cfb62ead879c97299cb3abc85bee90762c
- MD5 b5f9d789a5350975b52ab8b7b172d590
- SHA1 05cbe58fa062e5523fadaa1bc7404dfd1b35f3f9
- SHA512 77c727301370d20f9b7823c464882aac1dfbcfd033ace029f344780cb09747eac7153ea47e8c5f9ec89b5fcfac22651430e5388021652e1c33d8689ba530d08f
- MD5 SHA1 SHA512
ransom/ransom/Crypto/RSA/bigd.cpp
- SHA256 47d7203f215a953b0b08148de0210bd672232b2c85b31a3072aaba65e7a2bc46
- MD5 7ef16bd6c7b241cac175b6039c9f297d
- SHA1 672a82c18b8116356c10849b7bd97cfc949e8cff
- SHA512 02bdaf3739515406caf0b0583ac6ecec871e07400b81848b3474bafdf0fb55bb1ba3068077a81fbdc4d153f4f247cb2088b5ee6f8a54b93ec0a2451aa2b9ac27
- SSDEEP 768:c4w7x4a5ftbbkG+f8I58w4E77lDbWTg6OPjdc1ip9VpmHopenpaIUHYNTkGk/ZJF:c40hEZb5TmISK5CO6q
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Crypto/RSA/bigd.h
- SHA256 c7a46a8a25335b2f5082a533e20d96ae81b768ce98d6b49348acd1dd7811c37e
- MD5 6b708743d0e6bc29fc877c717b44fa5a
- SHA1 ec479e4e4ec52111bbc588ef0ec2d33e1e8c57e4
- SHA512 6011544e5d13d6516347f13bc3db066fd5c85fdf3051ca2f1b0848657d7f7e3137b77a5c3d8633afafcd934bc0be7249cba76297bc4e5aaca1e363ae7f745192
- SSDEEP 192:D4c6RehDVjU05iOA+02oGanlLrZsmaPWs0Abeoh0UAFIp9WJ1op:D4XehRU0oOA+0bGanwmaPWs0Abeoh0Dg
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Crypto/RSA/bigdigits.cpp
- SHA256 99abd8ecbb4065d298f538e37f0add1a74a220e408f9c9ff04dac1818c36b68a
- MD5 3e0a3f373f4a2d3d3f1bfedd9664e025
- SHA1 db2d1b3b8a7837c3885ec2847ec3e2ea25466377
- SHA512 b2dbf5240b4bba4fce26bfd516470215cef30c5aaea89506617631f2c1e9ca72f822fd97b0750eaceaf8a453dc076ea5e0d3b13bfa0b9beab30031719fb8040e
- SSDEEP 768:saW+6Rog0y0Rsj3wGtqyNtkmn/geq4a5jkfOAPeuZ5bEWXKX+i/:sSg0ZRsJfNgpplA8X+Y
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Crypto/RSA/bigdigits.h
- SHA256 ae8408c767f070e8144bf261fbc4710c283d65105f2f227849af1e78a47dcc5e
- MD5 0314d5b1d15fd739e14c44d03edf4619
- SHA1 81e81f0f88c5d60c1f67f9199a3eb11554309d38
- SHA512 efc0ea7707362a19cbd083261cc3c230c1e4be35df5ebdfc045c18a0140b194ad173f8b47c98245385cea36b2ba8cf38b401674bb355d61b355b277024fdd7e2
- SSDEEP 192:T4SmfoymJFPy5xDaU80ozh1YXx+4ET0kynmhF6:T4dQ5F65xDP80ozh1YgB0PnmO
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Crypto/RSA/bigdtypes.h
- SHA256 b88b1b3c51c16a9246a3dffddf69fa3b53d239d3518c7c0a3e245ae205c16276
- MD5 70c04b82095fa55e0c3fbcd6a46ec566
- SHA1 89c4fbc0692c28530010c9efece07f6de1546788
- SHA512 78b681785dc3555fc7be5d2b4b3a1373c7fe812d99f30daed702b819af4e7e4f2285c092e7b1f5ee3258393c076acf2973da473615a26f8ad2cce307191b1ba3
- MD5 SHA1 SHA512
ransom/ransom/Crypto/RSA/rsa.cpp
- SHA256 d7bd46d7ee7088f34ec85ab8175cecbd2ad0f7538a64b684209927e83af22ce6
- MD5 1384e69a51f8e62a617cc880877a2123
- SHA1 14772a21922ce312dfa23b50176a2c4ef0b21ce0
- SHA512 8d6e0843c96b0ec154e980d2c4164cafb9443c6f781d6078b9a2f9ac411a581acd098eb0254aa915b0341a5213cc74b72217b4d0ba6cff5a2110aff424f9281d
- SSDEEP 192:xYzFxvul+m3aK2sYXD/x6s0AtvjInMX5XBr0WXvL:xYzLX1tX5XF3
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Crypto/RSA/rsa.h
- SHA256 f82c42f7e44b4abb83ee37b11cdf6847248b1486288739899bca3326d8595857
- MD5 110e806bf645ddefc0a193d4ef0f78fd
- SHA1 16bb4c5480eb75fcb05648d355ca4016cffce8dd
- SHA512 d03b6251d43720f1f239aa8c9e589d4d5d3e92d2771958edd340a121c0a349c211467d2d09a79d6487cae7613913c33f09aa63af72bd6a610cb2aadcd8aee536
- MD5 SHA1 SHA512
ransom/ransom/Cryptographic.cpp
- SHA256 bacbd17dcbc437e29dd1e32877490d4832449de9a80821601a346ab0c483fc63
- MD5 49e7da650f02da4ebfaa7fc4d3a8f1be
- SHA1 d340e503066bda995221d8bbd53dd24f50caf79e
- SHA512 cc632ab77f0308c008b74d9260af6dcb3ffb37644bcdac3c2bbcc1f5faf7292113bc41ed883ff6228855ce5ea6cec6ab3841710cced78a4e6ed6cd3ef27eabbf
- SSDEEP 192:+jMQG6FbhB4BxpLU7UIoUhRW+06Riepc8B7LRipLsSIi/DT0fLwi8A705Bo8RM+V:EFbh2B3GoX6Riepck8R9geUqt
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Cryptographic.h
- SHA256 1cab5f088297b2da34a29d9ee86c295a8db4a3f1df691298c93eff78aaaf8c38
- MD5 1b79007877f72b7b76b3dca48098a029
- SHA1 c3476fd8234b20d0a47c031cd4926edecf503b2e
- SHA512 5fb5a2edc426d9306797c62d674264bf86ab138130d670e3ee86aeaa96a8ae76629ce86009416ad97731a8a4c3ad8e4a4c9a5ffa34d4833604516215210b95e1
- MD5 SHA1 SHA512
ransom/ransom/Debug/Cryptographic.obj
- SHA256 4021a292991de628b003952a0803fcf466102561f1902a4f47e1ee21f872c22f
- MD5 5597f28487971e7df660d6369cac2bcd
- SHA1 6ab838cd112092b0767b05b1e595c0a80ff5c012
- SHA512 c53d9601232613eacb0a5b059ca346259cfb46ed8a941d3052593213ebd99652f1cc21ebba7a6a4331282968606bf9ba09fa7e89e4b26348cf42c962227c114d
- SSDEEP 1536:fMruGALe8cLnIPniES3jYyyUHsrqq2yqq+eqCOskWFUdt6Qn/xcONvmJ3SMmsk:fjbLLunIPiEajYyyUhskWiX//Nvg3isk
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/aes.obj
- SHA256 218473b192b3fc72e9f174530180efb674e6427cb37055e43f1068f9a59b1e2b
- MD5 7a20ed9d232cd38f6dfa379363bb424d
- SHA1 6aa6a394d634b27d5d20b1499e24f2ebeaf81a5c
- SHA512 dee1f884b84a57e8ded2e0f4eb81ccc789e99f8708248cccf392411d728fda2e02dd0870ce1ea7eddff204b218436873d4ad366a86b1ecf0a8e0558260785ccd
- SSDEEP 768:95+L6KDmNFV3x0K0K0K0K6KMKc5oAN7QqExXXXXxfNkSiQqefTJ0vxEzD:N3xXXXXR/SN7dExXXXXxfNkSidefN0v6
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/bigd.obj
- SHA256 68363e6f16cea6f617914fdd0db00390dcb1d92b67a3c3be85e433d138c70b66
- MD5 7df51383cef90bbc5936756d544a9dd8
- SHA1 fcef2c8f8d2afc869c82529797f78a94fc9732d7
- SHA512 59f84cb5298c45d0912499fdf6d8c7c3a64a6bf2c3a1a340bcd60d8b2cb65c8fba542e81bf0613bbcd83ce087f1aff96cb776f3396bdea2fdf4a303b1e91be21
- SSDEEP 768:CMNCLssKDm2kY/wP1USIpxxXr0cTs0lCi4cEP/CyOJqo+iudEP2eWxe/X2i2MSWs:hoM4t+NyMcOpluG/WxesMSWWOwPxgd8
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/bigdigits.obj
- SHA256 e47481bd758af37101b05390cb87d352f2554bb05e1552b2fe556e70dc9394ea
- MD5 a58bf9fc75300102160a19b09d264506
- SHA1 228056d83fe8995f77a08619cce85bcc64ee75c4
- SHA512 b58f65ceb9596b8a688c85203b0bbee0b1842c0fcd11bc5710acfe444de39516d5695c62383870b6c4eb785256488f79e87f3e0e798d00e7772d18584e00eee7
- SSDEEP 1536:fDruN8d7gG/WIzAOuQ3UZyZSpoptwiSgbq7lQJrJxc9ZwYMmdwPxgdfy:fuNoIppZyZfPe7lQJrJ6aYdwPxgdfy
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.exe.recipe
- SHA256 35379dbd8b10947a3695386f3fa23bb5d33135bb8e5be2e6161067206f355edd
- MD5 584ead38b8b252a6eae67e6f9e62bfc5
- SHA1 e62ed0712386db0c804961851d82a5e03ce2d281
- SHA512 c19f247e5a232b4da3b031d7c4e52fbe06716b67bec94828e7d7a6ae03c304aae5694431f54222a8c8a7f9f405f4c3687e78265db5f18b0ad85ecd532e0c7988
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.ilk
- SHA256 2143554fbd07d5637e730437550a9e3adc8d63dc7da39c9a4acfca70a55e8795
- MD5 58a3d8b99f930ff1e1fc2cd49201f522
- SHA1 5e4fd161a90e4a75074ab35abc026b81875fe028
- SHA512 45f9fbd6ea0416b5afcca3d8eb5110cdc629d2b74a707f0c5e33eabfaf1f592785b89450267026dc5e9b448756397f977f1dc1fb549d1583a8bdc3fef0ff3882
- SSDEEP 12288:H9NgQFDXg/Z12lhiOJgvWrLhHozb6dDMv3AhLf4Y/zt7y2kkMfJRGgf7ggdyP:H95UgJJoMhLf4YoegzM
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.log
- SHA256 3441f1fc3eebd4c046eec55ea993f29afebe625d49d14de8b50f764ee3aaf3d6
- MD5 bde53d9088e79af0055ff963787b281c
- SHA1 4708e7a7a688c1c5dd71980ba78a05a01aef5be3
- SHA512 0c9213f6e1753e9b9679fe9f5618a31dbdbde0bbb87aa9782bc92361c18cf266ef3d957049c2d75d026c7adbfdef8703d192e4bc31258711344b36cc7c00222a
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.obj
- SHA256 d613ccb9f2ec7bf8ce2727869272c4d65d2865e7ff6aad1b7f4022da46cd02f4
- MD5 9d486f8492610286b0c246ee5bdbe13d
- SHA1 4d01a2d9d150c0fea9f4ebe1918530d50deb0c73
- SHA512 66999090d52a2994aa9701dae5687b617eb19b6b0bec467cda4e3ca38d01bb1508d8ece7da342f6a371749d12f5c6117e7c97364af2a41ce3e7995ce72004e81
- SSDEEP 1536:tjrFXXJALq4Yx6I6DW45Rsq+OeiuG5l/8IHpkAb87/PI6roMmnNII:tlXXaLC0I6DWMRsB8uSi68s6rINII
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.obj.enc
- SHA256 0a44fa00e5aed0f8eb5d7bb127056a1f7bd265ae844e61e31043919512e42460
- MD5 957e42514536c1cf129b5af43c9ae5cc
- SHA1 2d3311c671f077622421bf72478b9f97793dac5f
- SHA512 395e1e576b3320ddc1a64d0a269531af74bb54d6676f77980616f80a439cd6680551ae97536eb140cfa6fd3c5dc93184f2fb5c58a35e8d3ed55eb7b5eec76fb7
- SSDEEP 1536:o2rFXjxAnqIYx6I5SiqdERsWeiWGG3OCquUI1OAj773muPI2ZOMmnuwqGII:oKXjSn20I5SivCEWqIoi7ccWnII
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.res
- SHA256 902a4e4568a7675932c79c0824c10ab62454a405f398d93831c82f86ec0837a6
- MD5 00eca8055b81c50ddd30e5b1f194150e
- SHA1 2ac40065be6dbbcbd4ca13ef30669fec5236d301
- SHA512 9e3101bffecc27bd8b35a8712dbeb8e959e5b9170363a1e7c48272c7eeebf055405a26952650df14b83bde1b23fb8c978c0114fcb81c890039b7ad3a9b6a8f4a
- SSDEEP 196608:vRRRRRgRRRRRRRRRRRRRURRRRRRRRRRRRR/3LRcDRRRRRH56RRRRR9BcM9tpfHmW:vRRRRRgRRRRRRRRRRRRRURRRRRRRRRRN
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.tlog/CL.command.1.tlog
- SHA256 708fd496d9902b1419701554e5f07a5bfd7d65cb6ca071feb7d4e38b7702bda2
- MD5 e785ebb4958ec8367d4fcfeafdf3b0b3
- SHA1 f2e0bc940589fe3f028bcffcf642da756ddbf4d8
- SHA512 d1b8b037f39c1d41b3fea05ca79833438e62bb694feaafefee80eae1800f54faf40052cf93d7efeb7ad515d5fb1beb2f39d16c41ae3e53d081344e143ef5d943
- SSDEEP 96:O7nGWKeC7nE7noWKeC7nm7nQWKeC7nu7n4WKeC7n27nIWKeC7nG7nnfWKeC7nnN:6n/in4nRinCnZinanBinSnxininnOinN
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.tlog/CL.read.1.tlog
- SHA256 d5972991234132a75750e3b55bcc755e22403455c881336d90f2fb2430a457eb
- MD5 7084fa4abe4c2f17e815617f5d608df6
- SHA1 38a5c43fe89a3173e5e9fb2f43c18f905d55fdb9
- SHA512 0b986fd63a42a6244859aecdedb7dac81e75b193c5c444485d22d84b80bc209dddedbd0917445ca39d76cb3a551a5e257e4deb17ef31a3254aa9ed85923dcf74
- SSDEEP 1536:bjUZmEjjXomgjr6ijePlTVRo+PujUZwwsjUZg/VjUZg/vo+P/jUZ5vmLlxjUZhoh:f
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.tlog/CL.write.1.tlog
- SHA256 83708ab0f9f98cb5bc0f2e7a4afc177d7fc158d3d8b9cb06220a9c59b7cf8da1
- MD5 282b3ab91629affeb0888f2eb4ca631e
- SHA1 61d638be2d05663051c516e408abd737f6c0ad6b
- SHA512 663c4126a08e19eadead53e6d4965649aa3b54a621f9b275b896ba9de1ecc8c43e45f1dc1a1bc8da2f7b7381ec0905023cb688ed0798502cae8bbb2a17cbb8df
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/Cl.items.tlog
- SHA256 7ae902450210ef1c83983940fc21b529f134fb8c6f93442f9ce01ab5b0240158
- MD5 0a08e0d882bcc5d66a727cf6b78e17c5
- SHA1 aac053eadce903c2ed7024bf066537ac2a215627
- SHA512 fe498b30b3715fa7637bbff7a0ac354aa8f0db226d1b6bc4ceb9dfcec0a9f5147b90e1d201b51dc3dd6bb61420ea53c0c779cd74071d736867072796c70eecfa
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/link.command.1.tlog
- SHA256 ca7550d47e601095361f964b70abf906668f459f5d2380c1c1305c0fb5352daa
- MD5 72e8c4362d4651875b61a78b5ce49039
- SHA1 0e5386ec1ee3352d36d6771ec853b8b635e3ebdc
- SHA512 c8fe1a4d5def9c5601d84b4fa14643380aa230c63ae7ff7887d09aa1b3f71e8758c0b231751be3ac6af3df4b7e4ed063cbcb392295cc1c6817c674e82e77dba2
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/link.read.1.tlog
- SHA256 b0524228a2e1df0c483a8be2902fbfef4909898e5abbc7530cf218d334f7d435
- MD5 7c1f33275690f2115b691fe62f1649ca
- SHA1 9c6999a422423da1aa3bb48612296618cdd59208
- SHA512 bdbdd184cde602169b82bea06f1ec93d548b0d27696aed69856a047b8fec344aa7ac0cf78471778886d08fd2f936fd9a70dffb376feb7bd03b2ef1d48a01a91e
- SSDEEP 96:O7nW7nX7nP7nI7nIE7nI17ni7nIs7nJ7nr7n67nC7ni7nIQe7Rrm4SqI9E081tB/:6nynrnznUnI4nI5nmnIQnlnXnOnGnmnA
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/ransom.tlog/link.secondary.1.tlog
- SHA256 6683a13f0821a5bb53fe765c100a01fd92d8dce64a9b8aa170b715742e641cbf
- MD5 864d8d4ee2980d7726724b944f188ea6
- SHA1 e546222ac9112df886d0f70835e73bae7f842104
- SHA512 84338b5b43786f8c4a175e543f153017f0267db046b8ff62f65ae6d4ffbee290652ab064e9ed1b14eed0e78f09e1ec878a230ae1a497c64c91af87b856a1a124
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/link.write.1.tlog
- SHA256 521a0fce033bda4630aa9e7a18804146c32899d3b69cdd69fca6362aaf9c6518
- MD5 139e1931693ef7d57baf48de0c250e6a
- SHA1 4080133e321b03df1fb12057280d828d0f8b3747
- SHA512 0996e6dd22cb3d4d4c65cea630ca447e8d3328c2350766cfb9825741f29f3c372dae2a048691b7bbd0b5c8cc1f4eddfbf50cbbd67b800f7e3b26b6cf00f6779e
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/ransom.lastbuildstate
- SHA256 d1d9eee88db127df8e0ca8e3c8661096d2a28963f7b7b31ff0ae08ad2b9e830a
- MD5 6e43d6391ab4b4cf54c5171e1836edbe
- SHA1 73dc30a5143973c06032c9301b70d5421c5380d0
- SHA512 0cd52e60600b33c2666973c9dfe92f68c41ac2b269bfe2bf774cbe5f783bb829caf85f5f6932b623303302315372c35d56cb104ec097836aa5ccb9889efb8ea3
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/rc.command.1.tlog
- SHA256 19fe3644f8d6574ebe9bfbbb1b7c54620743e3d608dead6c6bf70485ab9bf7c0
- MD5 01c40f139138b40771eb4dc335e6daf3
- SHA1 c3b871429297828d5d29bebcb16e73667c38b638
- SHA512 f08758e4d50b6adc3855fd9235e132c75b26df368bf8eb9e3ea26f8ee64583ff11d61b4c5ed7394fee078e49bebf58cf1782185f564f0d535ea9c55e9ac997b7
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/rc.read.1.tlog
- SHA256 30006f403e086f710bdb7961ced49bfcd2d9c3969b665c1ab27aa46990135d18
- MD5 d6214192e958200d3c1308b4919dad27
- SHA1 d73a2b3e2b2c5afb4e9bb89aef5e8d489e8188d8
- SHA512 1f07527bbab2cf94396316c242305c0ad00fad8df583ecb5ebaa7cd3203763ed087617d8d4f3931351a2fdcc1381e2314f9de8097f405eb2c9262575e70f9973
- MD5 SHA1 SHA512
ransom/ransom/Debug/ransom.tlog/rc.write.1.tlog
- SHA256 69e158b46d0d197c568e3d5222950cad8b6b242294035ce790e09b0de1123ef3
- MD5 9e5b4994a429b2a274a2eaec327918f3
- SHA1 52c95e94f173dbc98a9d7f88bd373f19ea9d552f
- SHA512 b6c8a61742f1d3255ce8d8b5c176b49835058af1d09f664d127cced0799515b66727c25abe0a4d77fb56afb3799a650099886118a9b8a07fbbf70b3cce569a75
- MD5 SHA1 SHA512
ransom/ransom/Debug/rsa.obj
- SHA256 26d1578488300f579c3e2b6ddf10701836dabc7585f5fb0e9c87922c51801727
- MD5 560273e342e3b4882739e85512bfec31
- SHA1 179401fecc38b2ed1260a0bec0e46c60db582a13
- SHA512 a1d69565122f69f99d34ee8a4e8b9ce8f8a2d2cd44a378307f3b60a03ae4886dd7f8ee32770021fe16949747f70944028ed4ce65264ceb7e846fc9d01289befa
- SSDEEP 768:2/07KTE217Z87mgGYV6EWEV2CNT6exGiyMb:XBNN6exGiHb
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/vc143.idb
- SHA256 c1d4caba138e1d1d588b4e309197b15ebfda895fb60202892feb37753092ee87
- MD5 e404fa55a134127ee61ae54029946d11
- SHA1 be3f50f6b74f5f93eb5f3d4caf30fe7e5d0e9a07
- SHA512 fc2d0f529700746be7798618d4529cf1b94df3670fa84094b9958bd32e46d0a5cb6f7f8c59094cf3cdb540cdd215f8831fcc15e3e4c7d53f4bdbbb5f5e6f22bd
- SSDEEP 768:WUBN6H25EgT6Hu5nZKs/68gv186H7ECDhlokec6HvVbXW326HiknZKmJ8S5dMLWE:WkYoE7w8cgtJPfjepPRX2N8bS5xzcw
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Debug/vc143.pdb
- SHA256 557168d24ca4a4946a4f85c57c9077b3c43f068cbfdf899065b44dc9b5ac5380
- MD5 54433f7e0719d7718ec4fe2df3cd20d7
- SHA1 543dc081f816f0437af7f494138d8ac15549f06e
- SHA512 c330973a07522ac78bd2e1f21a4e738c1cf69c746a230d68a2db417afd4ec137026f837728cdf0a2ea5ad2bcbe07a1d76aa6bdf40bd80177d3013072e804bbfa
- SSDEEP 3072:Z/Nu69jECkc9YBBBE2AY//TnrM6snDbL9Gr7B:Z/NNECkc0E2AEnrYDbu
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/Cryptographic.obj
- SHA256 459faf882badf134c38dc9ff3bde48fade804feac759b6a28c5a5283d04e6056
- MD5 1d0b34f23d8fbe338a05c2d4cd43b269
- SHA1 fb0341867b8fb928971209d510b6b60187692856
- SHA512 1811fe054d7c8d9af4aa7974cebfb1b36faa420d65768dab5d5be2b59e57dda6f88e24174de00b45b34aba9b7424b577a1da2b08fd6e52e0bd67bc3ae4dcc275
- SSDEEP 6144:VASqntwy40CjlNfp+xNSq1gnZNKJhhmkyysHjl15:KxtQNfp+x51gnZ0hhmky9HjJ
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/aes.obj
- SHA256 87e918899a338457db77a5f623b05139a46b83b909db361062f381e4145f62b5
- MD5 852be190160500614941bffaf1ace0a9
- SHA1 3a751fb52cc0211302fc352cb96636b2d7e1e694
- SHA512 5c851728560a1c1eb076dda90e0689c8c00ef095f11ebed56b28e13d3589194b1cde72bda86f3d89ff81a3810b910ab480dd84424d19865090b99cc80db14bc3
- SSDEEP 384:oNZd+X4VgnEpfEp6fu3xrDHJizWnWoeerpKJFGv0fy5yjW9MnKBGLulTiiK6S+sw:ovd+X4VgncW1HllrpKJFKQ4YqcAOknkg
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/bigd.obj
- SHA256 0e002c29a648ffcc2bcaa6d44c8a650de6fdb4e49787ca4cb0314822bc226ea8
- MD5 6e47faa37760b4c94aea6472a8c03476
- SHA1 05e65bb22151333d747be210cb217f7a67ecc47f
- SHA512 cb60c49407ab0e872c69945632053dfe44da0c71b7ff0eb9692831a5fc5d2e8ab3b196ccac66d745b5f9537c3f67dac95b69afcd2e2e69456ebb183b27c1bf17
- SSDEEP 1536:aD3pWhYqoOQCreuwmRgBRNjcLT2KVOLLsxZ4O4:alC4CiuwmK2xVfer
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/bigdigits.obj
- SHA256 f8e7d28a87c9f5a7a118e8e3d05ac47e827bf87426fbade4e3f691cb538ea973
- MD5 d6cff69448dd27ba5c3a7743ec8b67d8
- SHA1 5e153d289a13cb95e351d5cc87f9237cb073f35b
- SHA512 600cab084e3b952748ea9050171a98b34f86089c1b92f218dd9926bdc126a6542967edf37fa086429ed04c0c27592f02376de56905adac5d658223499c7370a1
- SSDEEP 6144:m6hOSa48wnvq41OIsazjDgebFE8WA0ZgNF:dhOQ8wnN1O+gLCNF
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.Build.CppClean.log
- SHA256 a348052104d78c10f06aaa425d6a81e6eb859008fd7c4d9ac5fb12693ba1dd2e
- MD5 66c7d0492ce1d7cacc3067bf13b64fab
- SHA1 94f537b1d61a3035fdeb90acde1a90828f044223
- SHA512 5c4af5f2a05cbc8a4655bc706cd0ce33621ea289dd5279a068e8cbad0924097c85013dab457a00a985cebbd5bca14d5d26f88165bf8bf4d5d45276cb21bd179c
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.exe.recipe
- SHA256 d482ca104d23006fc86b9ac40276e49a758f0f554771bee34c7b5d220418850f
- MD5 f8cb143accaaa0043934acf4cfa87ac7
- SHA1 e745af22b5e1a153c601b084e410c3426705e85e
- SHA512 47c1d342cf65d36071f3c2772d3ae5685bf95ad2f7ae5b31a4a1701210163f0380c55380036994ef7a52e5205ff36ca7de69afc17e1be6956da9473337b14561
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.iobj
- SHA256 d10b6210413e3d69f5e0ccfae220d6538f2fbf2e6f3c81411c145a84bc0eaadd
- MD5 fff5148aeaa774dbbd6414ba254cc831
- SHA1 65adc21e3e8ad1da08a9e4583c871b30c7424d56
- SHA512 49e9ccbc3a1d368066830747fe6b00f345846bf6d81e6b343bb8d21ec9c1c921dc298906c29d7ff160dd4acb9d4838298bcaec082ce3ba2df1461e3bf7692ef8
- SSDEEP 1536:80McdBb5MMMMMMMMMMMMMMMMMMMMMMMMMMMQFEfNgbIF1MMH5lMaFl36o9TB/xQA:8YdBbLCfNgbwFh6o5B/xQZ3Y2B7dIe/K
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.log
- SHA256 79d292b55ad32de889a5bcf24ee45f85d34b39d27fe0b2563bc290045ff3c10f
- MD5 11f93450378d13d2146bd99a7d0024b4
- SHA1 830c3d7340d9dcbdcd5ae52a0af36e5c25777ed6
- SHA512 1bbb1c3ae6e78e1a4d098c2a883e0bf25d5b6a57d0e6a4987049f66494e5c85ee874699bef9c5866faa18d4e98b81c5e38f95c94e9f9b31153f08d04744b3deb
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.obj
- SHA256 e6915871846deb165bff2afae86cd5b783bf33de70dabd3dab11ced66a6e3b04
- MD5 d4b899fd255661d4716c726c58e0e521
- SHA1 282282df278f6c3122722c2f45b8d5eb1f4159d5
- SHA512 6726678e3a4b3e626cf987fc84f55ea77c3b8374365f84163b5444a50b85076a0b6f61ccd01b205fdf7f6b04b4765a2acd7bc111cfd5c548dea2d1dc308ad56d
- SSDEEP 12288:sY42w5vEYF8wVb1oBHhRMKc8xgBln0t5UL4eXFXxs35Mr+Dyg:sYKWPRMZ8xCln0t5ULbFXxsqrQr
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.res
- SHA256 b04582153d9697f50332a479c9ae2b1dd04545a3aa15c525cd52cba3df7667db
- MD5 abd2a81c52505430458ce135d2e173e9
- SHA1 4cf1e923d366c10c63edc32bd39fe3c3c983f280
- SHA512 85fe31cc5900ab24414098836bbebf3887929e87f0e9d924c89290843def33915b4b62c8253eca9f227036e7b04cf731b1a85df8751eebcd592b4d3f01b2a710
- SSDEEP 6144:joGJ+QtDeQYizHMTlaw81FRx3JmfBcOmgZ:0FdQtzH8lhwFbZgaOm0
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.tlog/CL.command.1.tlog
- SHA256 baffa4dec3fe631d31f640165d2d70db9c831ef132e4a03fcb39a399a9a0847e
- MD5 e2effcd4c339306324e8a5ae47688a04
- SHA1 fb1a0c32f03ae2807c385c2e049ec5d489e01535
- SHA512 07bd5bdaad5c409f1fdbd246f881b827758590cc87a26f33805127041d846d5c376690d85b155bcf6fa42c955b6f6a42a83ae69a3efeec69d340a0d9a6661357
- SSDEEP 192:6nan4nwnCnInanAnSnQninntnn/nnsnnGnnEnnenn8nnWnnMnnmnnenn0nnnhnnN:4
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.tlog/CL.read.1.tlog
- SHA256 52e9b4b5b7aba88f898f6cfa4d521a9fe862f020bf15908bc34d3eee6c79829c
- MD5 a93d9247ad8be42bb1ed8cf22fe41fed
- SHA1 89cf427b015945e195174adcf97f28454b5e53ae
- SHA512 345df15779f0d76a08a35e20277ab16f1d1c9271fd4b92eb4ea5986ed37ad4ea6cef059ba009e541dab8309eb3b394adf501e9a940882f5d901b08f9b470ff6d
- SSDEEP 1536:LjUZww4jUZg/ljUZg//o+PXjUZ5vmLJjUZmEjjXomgjr6ijePlTRBo+PyxjUZho1:j
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.tlog/CL.write.1.tlog
- SHA256 5293f221c0f0a490ecd959ef2b6a6f839ab2fbbb63d26a76308338b975c96820
- MD5 0712ee01316b5d4ffa0242e191802058
- SHA1 915438e41ac802fbd718db239e9a7e50ae4afbb6
- SHA512 6819051e784f5448c9a087e1d04235d09d47bd1345360c42964ee6ec8165bc404ecd2af239ac076e7734a4bdee12b0563a49e1df6a7084a47d87a6d1405d2a17
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/Cl.items.tlog
- SHA256 e4539520da4d4b6c342a11f971c3ff69c44f28d588ca2efc266be224271e9536
- MD5 0ba9992626d3f320a2e7ac068df34462
- SHA1 06ff0fc5fdc9a2540f94b4e635bd99ff5677a0f6
- SHA512 b64f5659c9dc065e004a5b9f38bb842efd5e1c7f9fa067f83f656c944f7738e2bd851114fb3eb2873ae454ba5147a56e7f33da9fafd7754521b1c817d4851d52
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/link.command.1.tlog
- SHA256 ddcbebfa651d2a2c848cc42f168a857d27d69939240c38455c71fe8ae39a3946
- MD5 a448527869fa284b3823397c847f11c3
- SHA1 b4bb4a2652910b6a61b1b84f4117846a82c14c19
- SHA512 c6b83d919b4a54df8ba8f86337ff443481eff548dab6efa2b08c410451ea056698376afd590c947761597dc994a7da8f22fb812c45c3be2d204a9883eaa030c2
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/link.read.1.tlog
- SHA256 9b8cd81650e4be8b2886ef149a7b7722ba8adbd159e6e3ce9c8daf75d737b3b7
- MD5 044584bc1c728d1fbfe9404444f7ab92
- SHA1 186906207bfb9e9ca524e8fe5d0ad44807c750d6
- SHA512 5f565397de57321c8df4b883083b3bb8263152dcc94422438eedb67c78a004c04781211ced8eb2c10cfaa665d97f6f14335e7d3c2896e344e0829f99bf81bed2
- SSDEEP 192:6nIQnIDbU2m9e69nn2nnXnnfnn4nnI0nnIFnnCnnIMnnZnnrnnqnninnCnnIQbU5:dbxqe6obxqe6v
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.tlog/link.secondary.1.tlog
- SHA256 859ca4bbc58c3d6d2c66776fa39a7b0e78f37777fc1822ea1346ca353b46ab2b
- MD5 e9fcc1b40a79ca22cd0433daefa92bd8
- SHA1 5a2bc60824833387ea4f68c4a92ee44f60e1b9ce
- SHA512 064347c6bd5bbc95616df2dbaae38f8475971dd321c942fc2d9033f66a64be11f7d814bf295a076460666ff56eba391389c0b6d2c842bacb8e51cb7dbcc6b349
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/link.write.1.tlog
- SHA256 e0c396d6b9d99ac12ce4f60ae178edea243b8600efc9d36319cc5ffa15bede69
- MD5 6bc7c67b0a2d04c2d709d7902d7bdb08
- SHA1 fb3387b67d5f95c199f9304fb0e3aefe411e1a0f
- SHA512 a819dbf7fa48f9cab535ac4f1fad0dfe5b6b0c869e037ff17ca422bfd3b007b62c6700932c01b457a904ac314190a2c1b9096abd981c1d6aac322a231794cceb
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/ransom.lastbuildstate
- SHA256 91919375030513a87111077c4fc98f1d41a4e969518a6de3e5f6e7d62de78996
- MD5 6bed5aa388df8fb3d59e51df06e4ff57
- SHA1 e62e7cb7189ec0a3dfeed75d3c77e163deb1b1b2
- SHA512 535d9f7dc0387bbb9e0f6a426908a5da58a416fbc0daa5d0a4c971590a0f4b0f4c8334bc604980ad620f418ba5a673d03dac563aab32180cf06658fff99be989
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/rc.command.1.tlog
- SHA256 20fada1442eb92f9cfb3348243d1f234336d4e33587650408e282f26f274f4bd
- MD5 99006d6fa1f81da0f43f4369591b0633
- SHA1 198e8f370aeb1d224658aeb9fdac186d12132d7f
- SHA512 15a2836798556366f1b94c41e15a260ddb8ab1fd45d1d14c443a0e0a061507455a382a1f7a452f32937eb5cd2cb64cdd52ef4c71a8fec64191467c77bc3e3778
- MD5 SHA1 SHA512
ransom/ransom/Release/ransom.tlog/rc.read.1.tlog
- SHA256 8a9dafcec01e890de9f0fcbb7492cf01f49fc3be0c072fdf151174899e6c6daa
- MD5 81364c70cf4b450245410a8551294e3e
- SHA1 9e7ec91ff7b23fc86f0a54ae9d6152870da0f07d
- SHA512 7330d85fda2b5e7a8733e10b607f6ebfe90bb983ebff378c63a28b3bcfd510ef39d43f07c1e02ef198864c926de7de8212efcb53aa5bc38f1b9ba1c376bbfdc6
- SSDEEP 96:O7nnr7nJgBgeDuuWYv3WCJGJK4j4XIs+sa7nL7neGnnnsGnnJgBgeDuuWYv3WCJI:6nnXnzjUkn3nhnnnrnnzjUInnHnnv
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/Release/ransom.tlog/rc.write.1.tlog
- SHA256 d790467df8bd7148f2259db61fefe3cb756c4279a371955a46673b0163a12b0d
- MD5 ba20aa2498ab19f154877902c9b3aa4e
- SHA1 eae38f70cc358e733ae7313f3acc5713cdc37aed
- SHA512 3dcb939e8796f5b1af038952e929ee54489fecfa111e48cb079a02d344d392ab3b75eb98c6b47d081dd9e9d7a35a8a2d5a37944dcf2f2e0daa1caf7f72b1bb1f
- MD5 SHA1 SHA512
ransom/ransom/Release/rsa.obj
- SHA256 b0b2047dbc90c54b31f31714d4e189fcdbf37008c8409f4bd69901ee4d244bbd
- MD5 cfcd79886098974870d10cb37ff87c2b
- SHA1 7a55c1e93f8ee6e06482f5411194813f7893209e
- SHA512 e3c8d62972cb109b014e27a6511e7f8149622e70dc07f6ba16378fe5e3ced1e38015465aad30c760840a2b542ef49b469b759f14673c19fcd001f8028d314a7d
- SSDEEP 1536:RUalMNSwopjCXb+D+tKao4+cIG4KVFV+JA:RpFwolKb+KzoVc2uVv
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/bitmap1.bmp
- SHA256 10e12addbcb83dbe7c92141417b0214f8206bd32ad03b53905c27d7cd03299a2
- MD5 ae5bbcc79746f8983edd9c36df9113ea
- SHA1 97b959134cc56c04356ee5e9f81fa8fcc8ade6d7
- SHA512 e157411cbced415f66fd684c7b76f9c63d46191ddfe225f808ce8b4f4db8b3fbe31bc1a499cb18e1f9cad44c3e0e1977efbca88d842e7a501a0ecb2642fa8ae8
- SSDEEP 3072:bJHZ8QtDeQYizHMMx6EfWawbQzpJrvJJMOXh3NXmfrFEZOmg1/BjSI:bJ+QtDeQYizHMTlaw81FRx3JmfBcOmgZ
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/bmp00001.bmp
- SHA256 154d1781b19070885989f92c1f77086e2e06db413ea95e1884be39570b80343c
- MD5 c09f3b2a45d2afaf362ab1b4b488ec29
- SHA1 c20661f43f785b8aeab34bfe01d89774cc04b1f9
- SHA512 052f198462cfbddba68caec31ac7a4372afd8808e97a4d22d6c8c9d80b80e14caab43e81307036842b80ccbb16b3b8881164bc0f4d9fec5a5442cbc832e94383
- SSDEEP 768:1MJWWWWW19999999999999TsDFo99999999999990:1MJWWWWWUDFt
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/ransom.aps
- SHA256 3966063768d8ff7111e9ab45256785a6246a67af05edf0b1cefb89693bab6b2d
- MD5 642eef81a8f32eb6bafd8a69c7592cc4
- SHA1 b34daba0c21f5d8de0ac86a5785004a3af248415
- SHA512 447ad333d05ebd78ec674f1366b1886b2e97fef2a3e20201dd5044aa4ddda74301dc579f3926750df5c24173b8ee68dcbc528b20de57849cedb59f4c708e3b44
- SSDEEP 6144:sz7BloWJ+QtDeQYizHMTlaw81FRx3JmfBcOmg:7VdQtzH8lhwFbZgaOm
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/ransom.cpp
- SHA256 1c64a0eb0846e5c4c402130185362ed85952603ef2ee24c2466953f67b819e22
- MD5 47992b7fb1047c95b04c79436df96011
- SHA1 1368d1ceeaed6333753c4ae61188ccc320ea17e6
- SHA512 cec52496b839be3f458d71a140ef7ded74ed158c64d1837dbc3622839d2fe5c762df253635bb94770ab9543708a898faf2a98c666d760347ad28207fad2db30b
- SSDEEP 384:y3xgWKN4ceDnFilRfDOzapvqsMtmkqVsd27roffpXRnXHURvD:2uNNeURf8a9zsd27yf0Rr
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/ransom.rc
- SHA256 91cf7606c5152c0b55f00048fc258567a9e2089794b469411829af0261d90d71
- MD5 d9fde8b70c4c00d3383994f0d2a84d42
- SHA1 9abe5d46eaa785eeb265eeb2e53599e478408d3c
- SHA512 fa781b05e6ddec2374d9b21dbc5608cdde1c8257f51d71fcf118dc1479f0605d17119484c16424ac51433fb4aa28183c9fa891ecd3d377038321b7c5b1264fc8
- SSDEEP 48:ogu4SJek1BidmTMyRXot7IV/M8MZHK6F/2JfWG990T:oP4SJecB7MsXosUZ39eMT
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/ransom.vcxproj
- SHA256 8d8b173e2d04d1da10348fcb2eab785589300aa231f639b53429dacf2192ccdc
- MD5 5e3fcd7c2f0ff71379470093e76bf804
- SHA1 1b8e32eb690fc548308fa6df1579c61b29602bcb
- SHA512 46b1bf1d9db99e67291fbe219740f93afa972ea73ce0fe143f70710cfa7b728bebe00a17776be2166662ba756fddbe349af9d5e5ad624fe2dbc9f4904ea209fd
- SSDEEP 96:Z0/zcpr1fNOwTFOTbwTaOT2YyaLbyaLMyaL6yaLDmFZA7/ePPcrL8eWPc7qHe38O:e/zc9l0A5t/YPcn8JPc18gPci/xPcLE
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/ransom.vcxproj.filters
- SHA256 6aa1cc196a5857fde05e01c5c8c8b47682d0c9d371bd4ab42006ea15fefa6575
- MD5 941351f929bc70fed99533d4430c1121
- SHA1 92f28875137add35e94169b790911169b96d10ba
- SHA512 7de9f736b2697e63ab6d9c899d95b0d80da4869b8112389b398e6a04946eed755fb7688778c9507575179fb98358803c15a686d0d7525a0859b164f77d61c0da
- MD5 SHA1 SHA512
ransom/ransom/ransom.vcxproj.user
- SHA256 7502faf26979fc3ee106ca7ab072f9b1666cf912f348482ad7ba7a1bc0b64a16
- MD5 562393f574bf53551d552a7b4b535afe
- SHA1 9de3ae3883e70e59b12fd754aed2b8ceb2c6942a
- SHA512 067e51fd745a458aae82c5b1001d751ef24e15f099255e3568d771ced4f0ec2e535825b6e97e138cac63e1dcf8fd09e3a4487d6bf71d2d87d8df79d5683a95e3
- MD5 SHA1 SHA512
ransom/ransom/resource.h
- SHA256 bd288c2e15701a073f2f1834026de8b9546253d861a4b344346f7ef4b915549b
- MD5 fa71e132887566972f926357b337637c
- SHA1 b54d83de107c4748c57163f3275ccbbb390154ba
- SHA512 a8ca0f83d75a693d77f63f096d863657d38ca0513bbd72c55f51e1a451a374005d33f915061e9ba4572ba638b998379bbbd5c2d910859d8a8fa7f126c132faeb
- MD5 SHA1 SHA512
ransom/ransom/x64/Debug/Cryptographic.obj
- SHA256 fd7b8be39ade2c43866f49a214c1b2db723fa0b5a958dce4c0a3b6a7a976df2a
- MD5 8eee3db9273f6beac4c6dbc02abc1a4f
- SHA1 25c534edacb4d2b8afd7a512c27deb2f46f18f21
- SHA512 d6e1db58a3daa52584a75c5bf5a19280b22deb71b46eaae1efa9083d7955f99798067fab8da96cb993c512733301f5fafc6a5ff0b28fc17f271789e5ae05bc2f
- SSDEEP 1536:nmmTlkEryv0j4P20kqycXfs8G0MamK2WWmmmmhcY7Eg3re4ngnVI9OdGMmAZ:nsEuv0n0kqycX9G0Jc3/nIVLdOAZ
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/aes.obj
- SHA256 9eac719475f752deccbfe39e5ba1333e52943d06cdce97e2ec0898425063a17d
- MD5 c9fdfe4146c2d618469662c0e68aa0c6
- SHA1 2ce0de85838cd39df93bec0b6a65d31b295891f1
- SHA512 82c4593aef595e5470ec6701997a2ce150637aac0fbd97d4eb9a635e0001a28e3df3d11fd0855e03c97803c78761fe656e625b58e040ef829d035ceb4fc87210
- SSDEEP 768:O82duZ8KDmSg+x2LjMAIrx2LwP9Y4L+1Goo:Orwx2LIx2Lx6+1Goo
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/bigd.obj
- SHA256 6a634a319aee1aee567f08b5e9ad93f2b621f6ced2f6004851881d1bcc6f4d01
- MD5 be3300dc7081fed4503509f463cf9fea
- SHA1 11d1df3f7b3d7971490cef382d212160a6cbab5f
- SHA512 1e2daa25b257f0c6f11ff8805dc921868e5e92d5272a86403a6321ef3956d9b9db34b7ee08c0858eecce1c6e11f6f24672f2af10214cc9cc86aa41f37197eb7a
- SSDEEP 768:DVffVemtuk4KDm9g+FHFZPAGL/adMUVU6+4twicJ99YQ04P0botN7CIycdvxkC+D:DNcmmg2HnZ6Tcv0i6CABNAjVYx5
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/bigdigits.obj
- SHA256 632c5e06b1e10188aea14e07f73371031ae75eb46e8ad263b1e2f4ebef00a03f
- MD5 9e5a86c66bff222bf1d6d4cda85622f9
- SHA1 bd315e89941bf9452eef384cdf504ec816d10a55
- SHA512 b8d83a36af38b886467c986ec722ca0783e1350b529aa7aeb115e6f610d053172bbc08d90bed91ff3e532fcedd1bd11a689c2f656f3cf1ff49bf837e56d2da2b
- SSDEEP 3072:FMJO7kEF68ya7V13jmzZwbjMmReI/ImBVdt:+EIEF68yqV13iSb7ReVmBVdt
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/ransom.log
- SHA256 7a83bb30d6902304bc077a859fec1ca007761188b39603c0ab98bd5e897a8454
- MD5 abb46fd83755000dc0e851c399c55519
- SHA1 ac275e076284db05d12ccf46ec659e6e1bf1680a
- SHA512 34721a18570000be6b5065b0176dc7c03a2c1fe853c47a2ab33e7db1cdab2113f38f084f0c7893205e71b93119c86c5b3409243d3911f36845205cbddeda0633
- MD5 SHA1 SHA512
ransom/ransom/x64/Debug/ransom.tlog/CL.command.1.tlog
- SHA256 6cc742c59df30811c5e30b08956c49d9659768815baef767c889e5415db421c2
- MD5 f1ff1745bc642c30db7ef6a83df23811
- SHA1 4df906b8ea72ff19e2bf8835f516fa40c292a612
- SHA512 9ff1d8a3872b6e2411a556116a3d7d379a3703f4a99f8f7474e1bfe807e2bfd2abf7d490de5302c6e070bdb412a3e220d5f21f078f90a40b479b4681c223d8be
- MD5 SHA1 SHA512
ransom/ransom/x64/Debug/ransom.tlog/CL.read.1.tlog
- SHA256 40b8c8f972f51be4d98398170b6a326e9fb48e529a851479e688558b838599b3
- MD5 5088afcd327dbc6c345a4c307b605f40
- SHA1 88c8e99f91499ea0efc98456618f7fcae470243c
- SHA512 45c0de9c7dc81beef94978ea57884f8e6a90185d51ce8ebc028691622e7c1441ce535c3e9fc53d156ed9cbcc796b5149534bdb5560416d4bef9af7551940f14b
- SSDEEP 1536:bjUZmEjjXomgjr6ijePlTVRo+PujUZwwsjUZg/VjUZg/vo+P/jUZ5vmLS:k
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/ransom.tlog/CL.write.1.tlog
- SHA256 b4cd718fc817f7f540b16fa5996a2b31d9cd8fbf7bc25d91449ad1c8e50e1f82
- MD5 439c8292885fe1b9d765313ca943cd89
- SHA1 fd01a281e8a473367744ed7a7ae7e5d35cdc3359
- SHA512 3ab8ccea2a41325e498a2c1e04048cc2c8b04140187fec28d16d33e2e00ba58548e60430a199deb6ceaefd7c516aefc8bddb466f6cf94c758ab8bf48916e127a
- MD5 SHA1 SHA512
ransom/ransom/x64/Debug/ransom.tlog/ransom.lastbuildstate
- SHA256 93889b60c2ff03553a883bc67348473954c2797f9a89c09736b799f09b5ae75e
- MD5 80bb0906aee5aab55c83b5db08139ca8
- SHA1 68318dd3a10f84ce94513b9cffa0a911080917a8
- SHA512 f6c3aa119d1f509689bdc5c527a3b1b71afd2c6a77adea863ef4ad94d4434512194e00917610390661c1389e1517d16954b34f65fb863e906684bec461f79203
- MD5 SHA1 SHA512
ransom/ransom/x64/Debug/rsa.obj
- SHA256 4e17de9e7a96bcfc8c611371ffe74766c3d7a7f1e1417a21371bbf3ebbed0b5e
- MD5 7174b9534961551971994b1c8c6602e0
- SHA1 6915044e5ff9120fe11e079a8b4f6246ca75a269
- SHA512 c2cf46208e7c0b32f797fcb134e22aa7f9ac72dd119db0deda831d3a474a904abdcd9ad74646412dc2976a58ea31eeaf6f1791e1767c13ef43e01dab19654241
- SSDEEP 384:eFG+eYKDmgIB7YrfXyXk07X2PLKqwshpYxbg0KlABaL2hA5pqH:1YKDmgIB7oi062+qwaqb17Ba4Ak
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/vc143.idb
- SHA256 fc5762ef65b5ace0b5a839301ea0329ac60cf6b8621a8e15981bb6b4d3a63463
- MD5 7ac2b2c7462a44bae83d9668d8deb0c9
- SHA1 305ca372055e856655920c3e4692584d9abb666e
- SHA512 b9ee4f554eabc8490cfc19cac744b0488da76fa37e06e0e5dbea8c0c3a996f4c651a4c16a37d0f2f9d662207008c80bb23e8d87fe018c9b8facb2bbb876d088e
- SSDEEP 1536:uHcr5cfm3sfdrqSfNv8UVqXEHiy2tJ61lxdp2kJ:uo5ccsV2E5Jk010Julxbv
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Debug/vc143.pdb
- SHA256 a56d97bbc56bb4f34cd151933b3301b91c2be0c6f6bbd4f3f1fa4c1598ce2aa7
- MD5 cb2e7e1733941af4798c845870890fca
- SHA1 f3ffa1705b4ce9a8952b3038b86b397b2db1951e
- SHA512 7c3456605cc16c52bc60649c5a71d6f34bc78a97ecc8d420ce0823c519a5cf6fea1225b6dbad647c92c5ca5ef07a5348b1ead2621b51690d95d93e215645a964
- SSDEEP 3072:rOW85AJpeDgh06lQK2posUojQ5jagAgMgG2jTjW3V:KW85AJpeMh72yhmQdagRMgTbWl
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/Cryptographic.obj
- SHA256 5119869bac7e9a9a58e17e3b1c49a170ce96bacb55050312a8bb8e81e90fe430
- MD5 f497fc585069b3e03474b585904c0d80
- SHA1 c80cb7525d62c29169476e591e3afe4ec4546f32
- SHA512 73a6693a88b7c26611bce71683eb6bb69b023c88799855353d6eba8694c6aef2d75a5627de0cef83e7e663ec952bca33659e61698afd031056f69b6e41a1fb20
- SSDEEP 3072:ZlHIJgiExC4FiYy/BjWobHCV538Uhfo0k2cZulmgRzJ1dSMJS1fc5ezqn:bHICvxCW01iphfVcZF4l1oMJYEiqn
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/aes.obj
- SHA256 da2bf5e3ffd9046e3b22e87c97f2ec1bee46c2f51926a01c53739aafc4c3228c
- MD5 f8f1e839b0ed8a8ab6cddb3f16f1ed2a
- SHA1 c740fba1ef7152043bd5f0cd389574704d7204ad
- SHA512 b4ab5fc973624c27850f2cb432df1ad13a1db7756f3c61521eb50c2b97f7242469fd9e42e5a5f7a0b9c8cf6dd247970439d9ca3efcc00b2102c416e89abcafaa
- SSDEEP 384:dUWydFfL2O1GFM1nBJIejBYffNz/nckxb8VWPEJwXi7vMK/x1otvL2:WBdFfL2O13pBiyyFvL2
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/bigd.obj
- SHA256 98bfedb32b1c3c85f14988f07a6f909d830d2bc11ceadc23e4be12dbf3664ae6
- MD5 52062fdca6639a2ae94ebbb7922e1c6f
- SHA1 6ca7ea44fda61ba8e73b904e4975491f7930d3de
- SHA512 b9fe6ebb680fa53cfaa5dcd24bea2cfb7c68ad16c0bdf2b80e19b1a99af7e01f2f39683b632684d3bc6c95109ece6b7c44966ced50b2e6b26f975575240eded8
- SSDEEP 1536:vskqFleCBZ5h6f0IEUp1sduAQG2F3Yk8IPp5scWge3WOB6uwJ54s:UkOlHBZ5Mf0IEUp1sUAQzf5jWgmWh5h
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/bigdigits.obj
- SHA256 b3a4b40d1ce00a4600737ee9097cf96ab112b1eac196279340602494d7da8870
- MD5 ffa0a58a3305e396a3aa1075bbf63de0
- SHA1 76c12005fb6856b456e8c1ce9987dc4691622640
- SHA512 4567b3fb985a72e8e581e89fbc0d5088675df59e11782a52b012d5cfb2c06447efd404c9dd8bd27f27012b3a95ef52d5f9590ae7af19d4133e1d4d45c2af9980
- SSDEEP 6144:TnJHSZtelHBZ5MqeabF1PksU8FMFJtsVx:bJHS/e9BZ5MqeaJ1Po8FMJGx
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/ransom.Build.CppClean.log
- SHA256 c720d732dca60b2f554ce00bfafb6c29ab0e88d069444930e5ba3d015202211e
- MD5 920302b59a21825f5ceefb7f6dff504c
- SHA1 6dbebedc6f8226ee22c96b6247859148ff5a4c1f
- SHA512 20317629f21ddae237961ba41513189fdd72d4e2831e08b7e34a971ab9557764169654aee2b5b5026bb5479d05b07c3ece979054023344b984dc7942a8470890
- MD5 SHA1 SHA512
ransom/ransom/x64/Release/ransom.log
- SHA256 f8bf02784b67f5da387eac89247a90c66113d3574e024f44d2147c5f89831cf8
- MD5 d33c7355f68b33412c242104280254a7
- SHA1 9d1d412c46549d6b74de9cb526f3d3e09a3d4995
- SHA512 31f6e2286821c1d67da25e8527498a416b8d8d0a45c365204e328cedaa2aa7b37185a9bd05cf043080084547f7ce6c386454ab9153ad2a91cf1028f837185744
- SSDEEP 48:p8ghxgyMglxgnxgD9gg0BxgcxgL9ggAgUg1gzg2gugbgJ8gVuZggfZoE8gGc0gB/:p1VBMBBPVpuZfZrqcN
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/ransom.tlog/CL.command.1.tlog
- SHA256 cb5b6d6c7811619d93d0b70985749e03055398ddc657d61fec1e1da3b1eb71ca
- MD5 bcead444b5626299f6704196b109b29f
- SHA1 ce3056e739d0c5c5a87df7b95b7ff6b0c9bd9fd5
- SHA512 2b8568a54ea3099fa2cdf894900237c8fceaee31eb920cfa21b2c4ee449daae02b61d8e528a6deba6653e0bfa8f6a148e11bd4f9afd3020016f9170f7fe312fd
- MD5 SHA1 SHA512
ransom/ransom/x64/Release/ransom.tlog/ransom.lastbuildstate
- SHA256 85e9005fcead27fcf0cdd860eccc2dbd17b6625dfe76ab4b10449348c749e97e
- MD5 1827b836f4e72f5f65c6fd3643eea071
- SHA1 a9111153fb350d4173db016358b764477661fee0
- SHA512 8eadeb362c43d4ac1357789a39d95b386ce6ae805dad79fdf0f2ac4fb9f2a7e4dbbb2c2156126382dd4660f83c3d5f44b5f8f9f04d9d1c2bb0dc1eea6705a09a
- MD5 SHA1 SHA512
ransom/ransom/x64/Release/rsa.obj
- SHA256 252d9971279ccdbeee091c88b7e04a34614100b8859827e192dbff390b917e4b
- MD5 83ae3655faf650fbf5cd8629313b0ab5
- SHA1 c2d576c5fb47cc99115bc16eb791583c2d56e4b5
- SHA512 72267b80b4a4ff2230dbf6b8302e55647c3b58c75cb557a0a1f0c8e1a281b68479734d7de353ee1aabc106af8e55d62ed67e14066685a46c91e3f239b7f70099
- SSDEEP 768:bPodFfLXflWppiG5ZIj6q56PsHe0bCiI5U5ugeaHP2sGusU7JpLCCsPrpCj8smfe:reHS0bTpeUP/xsy/LdA0j8sz3sQR
- MD5 SHA1 SHA512 SSDEEP
ransom/ransom/x64/Release/vc143.pdb
- SHA256 a308d0ba733f883408ad896ff69732ded08dabc714581e782d2c7f88c1ca215c
- MD5 da1e8462fa941452c888ad5be2bb5ad8
- SHA1 a225b4e5d78ad16f893ada071b9a2bd6f7f9edfa
- SHA512 8fdb02867c0149bbf89c12953c94a196cda2d41c4f1e371afbeaaeaaffd807f7233bd3b13fc7d842774f2a02b72482e21c5a3347ec91a126ebf98ac01ad17bda
- SSDEEP 1536:4scOvwY3a4ZB65jwjzpzugz84yJaBMA68lRXz8T7cKUtzpzn7Rt/F054iiihwoDG:4NuejwJOJar6gXHuWG9bw2yIxme
- MD5 SHA1 SHA512 SSDEEP