Overview

overview

7

Static

static

1

my ransomware.py

ubuntu-18.04-amd64

1

my ransomware.py

ubuntu-22.04-amd64

3

my ransomware.py

ubuntu-24.04-amd64

7

Analysis

  • max time kernel
    0s
  • max time network
    129s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20260513-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    05/06/2026, 11:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    my ransomware.py
  • Size 3KB
  • Sample260605-nywebafx7k
  • SHA256 f5288be68479ee1217f32a70d854ab3a2b7943141418fa4f4c50fcac2038b032
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /usr/bin/python3
    python3 "/tmp/my ransomware.py"
    1⤵
    • Writes file to tmp directory
    PID:1614

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        SYSTEM_COMPROMISED.txt
        • Path /root/Desktop/SYSTEM_COMPROMISED.txt
        • Size 143B
        • SHA256 9e5d5719c6ada06d904f93f6e8f7a2de04009305761dfcd396548368f93a9344
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        master_key.bin
        • Path /tmp/master_key.bin
        • Size 16B
        • SHA256 a6603e585e97b59e4350069a1d07f2fea9c4fbaf70fff2a473b9b676a957db78
        • MD5 SHA1 SHA512
        Submit Download