Resubmissions
25/03/2025, 15:11
250325-skmbpsxzaw1025/03/2025, 15:06
250325-sg1d6a1px21025/03/2025, 15:01
250325-sd5jpsxyct1025/03/2025, 14:56
250325-sbdcfaxxgs1025/03/2025, 14:50
250325-r7ve6a1nv31025/03/2025, 14:46
250325-r5ab7sxwhx1025/03/2025, 14:40
250325-r2c9paxwe11005/02/2025, 10:25
250205-mgcefaslhw1005/02/2025, 10:17
250205-mbs51atmbk1005/02/2025, 09:15
250205-k785zs1pfn10Analysis
- max time kernel
184s - max time network
275s - platform
windows10-2004_x64 - resource
win10v2004-20250129-en - resource tags
- submitted
05/02/2025, 10:17
General
- Target RansomwareSamples/Hive_17_07_2021_808KB.exe
- Size 808KB
- Sample250205-mbs51atmbk
- SHA256 a0b4e3d7e4cd20d25ad2f92be954b95eea44f8f1944118a3194295c5677db749
Score
10/10
Malware Config
Signatures
- Detects Go variant of Hive Ransomware 1 IoCs
- Hive
A ransomware written in Golang first seen in June 2021.
- Hive family
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\RansomwareSamples\Hive_17_07_2021_808KB.exeC:\Users\Admin\AppData\Local\Temp\RansomwareSamples\Hive_17_07_2021_808KB.exe dsrm -subtree -noprompt -c user"http://+:443"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2928-0-0x0000000000A80000-0x0000000000D59000-memory.dmp
memory/2928-1-0x0000000000A80000-0x0000000000D59000-memory.dmp