Overview

overview

10

Static

static

10

RS.7z

windows7-x64

RS.7z

windows10-2004-x64

RS.7z

android-11-x64

RS.7z

android-13-x64

RS.7z

macos-10.15-amd64

RS.7z

ubuntu-18.04-amd64

RS.7z

debian-9-armhf

RS.7z

debian-9-mips

RS.7z

debian-9-mipsel

Ransomware...KB.exe

windows7-x64

10

Ransomware...KB.exe

windows10-2004-x64

10

Ransomware...KB.exe

android-9-x86

Ransomware...KB.exe

android-13-x64

Ransomware...KB.exe

macos-10.15-amd64

Ransomware...KB.exe

ubuntu-18.04-amd64

Ransomware...KB.exe

debian-9-armhf

Ransomware...KB.exe

debian-9-mips

Ransomware...KB.exe

debian-9-mipsel

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...em.dll

android-11-x64

$PLUGINSDI...em.dll

android-13-x64

$PLUGINSDI...em.dll

macos-10.15-amd64

$PLUGINSDI...em.dll

ubuntu-18.04-amd64

$PLUGINSDI...em.dll

debian-9-armhf

$PLUGINSDI...em.dll

debian-9-mips

$PLUGINSDI...em.dll

debian-9-mipsel

Ransomware...KB.ps1

windows7-x64

Ransomware...KB.ps1

windows10-2004-x64

Ransomware...KB.ps1

android-11-x64

Ransomware...KB.ps1

android-13-x64

Ransomware...KB.ps1

macos-10.15-amd64

Resubmissions

05-02-2025 10:25

250205-mgcefaslhw 10

05-02-2025 10:17

250205-mbs51atmbk 10

05-02-2025 09:15

250205-k785zs1pfn 10

05-02-2025 08:48

250205-kqq8vayph1 10

05-02-2025 06:31

250205-hae5jatqgt 10

05-02-2025 06:29

250205-g8xlsstqax 10

28-07-2024 16:38

240728-t5tryssgmm 10

07-07-2024 14:07

240707-rfgd8atekm 10

07-07-2024 14:07

240707-re689awdpe 10

13-09-2022 17:54

220913-wg1lpsgbg7 10

Analysis

  • max time network
    7s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    05-02-2025 08:48

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: unable to install sample: Error: Unable to open file: RansomwareSamples/Hive_17_07_2021_808KB.exe Consider using a file under /data/local/tmp/ Error: Can't open file: RansomwareSamples/Hive_17_07_2021_808KB.exe Exception occurred while executing 'install': java.lang.IllegalArgumentException: Error: Can't open file: RansomwareSamples/Hive_17_07_2021_808KB.exe at com.android.server.pm.PackageManagerShellCommand.setParamsSize(PackageManagerShellCommand.java:608) at com.android.server.pm.PackageManagerShellCommand.doRunInstall(PackageManagerShellCommand.java:1442) at com.android.server.pm.PackageManagerShellCommand.runInstall(PackageManagerShellCommand.java:1408) at com.android.server.pm.PackageManagerShellCommand.onCommand(PackageManagerShellCommand.java:221) at com.android.modules.utils.BasicShellCommandHandler.exec(BasicShellCommandHandler.java:97) at android.os.ShellCommand.exec(ShellCommand.java:38) at com.android.server.pm.PackageManagerService$IPackageManagerImpl.onShellCommand(PackageManagerService.java:5964) at android.os.Binder.shellCommand(Binder.java:1049) at android.os.Binder.onTransact(Binder.java:877) at android.content.pm.IPackageManager$Stub.onTransact(IPackageManager.java:4313) at com.android.server.pm.PackageManagerService$IPackageManagerImpl.onTransact(PackageManagerService.java:5948) at android.os.Binder.execTransactInternal(Binder.java:1285) at android.os.Binder.execTransact(Binder.java:1244)
Report Analysis Logs

General

  • Target

    RansomwareSamples/Hive_17_07_2021_808KB.exe

  • Size

    808KB

  • MD5

    504bd1695de326bc533fde29b8a69319

  • SHA1

    67f0c8d81aefcfc5943b31d695972194ac15e9f2

  • SHA256

    a0b4e3d7e4cd20d25ad2f92be954b95eea44f8f1944118a3194295c5677db749

  • SHA512

    18c5b28bafb13edf47f6a2b803d9d9a914945f037b266a765f2a324842c5ef04ebda27eba31851d2d63e00779a42900e0edfe4ad5bd817eb4f43fa4d4e3a4767

  • SSDEEP

    24576:lafTGwLNdRk4RBtr/ioF4/I+CMx3cMt3/4KFG8Qz4YwY:IT7dRFr/ioFjicMtvV4z

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads