Overview

overview

10

Static

static

3

beda5dced9...53.exe

windows10-2004-x64

10

beda5dced9...53.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    beda5dced9aea0e45bd3b0bd970707337c7e334be7043918461a39673d006353.exe
  • Size 16KB
  • Sample260210-cr7cfsav7d
  • SHA256 beda5dced9aea0e45bd3b0bd970707337c7e334be7043918461a39673d006353
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
timetimediscoveryransomware

Malware Config

Extracted

Path
Ransom Note
  • ---------------Time Time Ransomware--------------- All of your document,pictures,videos are no longer accessible. We encrypted them ! We also stole your files,computer information,passwords,cookies. If you don't pay us, we will leak everything on the dark web. Please, find @[email protected] on your desktop to pay the ransom. If you don't find it, check your recycle bin or antivirus quarantine. We ask for 100€ of paysafecard (https://paysafecard.com) /!\ Warning /!\ Please, do not rename encrypted files. Do not use third party software. Do not try to decrypt the files yourself. /!\ Warning /!\ You got epicly pwned. ---------------Time Time Ransomware---------------
URLs

  • https://paysafecard.com

Targets

    • Target
      beda5dced9aea0e45bd3b0bd970707337c7e334be7043918461a39673d006353.exe
    • Size 16KB
    • SHA256 beda5dced9aea0e45bd3b0bd970707337c7e334be7043918461a39673d006353
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverytimetimeransomware

    • TimeTime

      TimeTime is a ransomware that has been active since 2022.

      ransomwaretimetime

    • Timetime family

      timetime

    • Renames multiple (148) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks