Overview

overview

10

Static

static

10

ransom.zip

windows7-x64

ransom.zip

windows10-2004-x64

ransom.zip

android-13-x64

ransom.zip

android-13-x64

ransom.zip

macos-10.15-amd64

ransom.zip

ubuntu-18.04-amd64

ransom.zip

debian-9-armhf

ransom.zip

debian-9-mips

ransom.zip

debian-9-mipsel

ransom/Bui...ID.txt

windows7-x64

ransom/Bui...ID.txt

windows10-2004-x64

ransom/Bui...ID.txt

android-9-x86

ransom/Bui...ID.txt

android-13-x64

ransom/Bui...ID.txt

macos-10.15-amd64

ransom/Bui...ID.txt

ubuntu-18.04-amd64

ransom/Bui...ID.txt

debian-9-armhf

ransom/Bui...ID.txt

debian-9-mips

ransom/Bui...ID.txt

debian-9-mipsel

ransom/Build/LB3.exe

windows7-x64

9

ransom/Build/LB3.exe

windows10-2004-x64

9

ransom/Build/LB3.exe

android-13-x64

ransom/Build/LB3.exe

android-13-x64

ransom/Build/LB3.exe

macos-10.15-amd64

ransom/Build/LB3.exe

ubuntu-18.04-amd64

ransom/Build/LB3.exe

debian-9-armhf

ransom/Build/LB3.exe

debian-9-mips

ransom/Build/LB3.exe

debian-9-mipsel

ransom/keygen.exe

windows7-x64

1

ransom/keygen.exe

windows10-2004-x64

3

ransom/keygen.exe

android-11-x64

ransom/keygen.exe

android-13-x64

ransom/keygen.exe

macos-10.15-amd64

Resubmissions

05-02-2025 11:06

250205-m7gf3svpcl 10

25-11-2024 01:10

241125-bjt7gswjcj 10

Analysis

  • max time kernel
    0s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    05-02-2025 11:06

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/ransom/Build/DECRYPTION_ID.txt: exec format error
Report Analysis Logs

General

  • Target

    ransom/Build/DECRYPTION_ID.txt

  • Size

    16B

  • MD5

    abf6627efc21c211433afb3cead31d9e

  • SHA1

    a6612acd7ba9f678f0cd30a3a38de3756d61d173

  • SHA256

    9e20febb10124d938c514475adbe4872df835b95cd2a988b9c068eb43a8c65d7

  • SHA512

    ea5cfa28be631822bf2a52d62a4cf7b426e0317ef039462d657e5bba7ab75ebde15089e2fb7bd99568a109f8b365b6065d8929c413639a0e9b491b224850febb

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/ransom/Build/DECRYPTION_ID.txt
    /tmp/ransom/Build/DECRYPTION_ID.txt dsrm -subtree -noprompt -c "user\"http://+:443\""
    1⤵
      PID:1505

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads