General
- Target testBAD.txt
- Size 984B
- Sample260720-2cx8nsfz4j
- SHA256 e8d1ea78360c17560ea069c3944b22052d2c02a4126ad97b1393f00af87ef2f8
- MD5 a7a9d8d7ca4d6d8fcb64cd2a03c47495
- SHA1 c61f746eab4d036a28cbdc27314fa7c02f625c73
- SHA512 64916184e189132cce70bf8e0bc0a3fd16c7f6fd77862c0d2d2be53e479e901dd42f0903f47a60b466182a890e2d67a8521fcf2e72a81f9397e968076cc0aa8d
- TLSH T1BD11EF3BF141B692E1F25E999E7164F1F2213083B81E9C42E40B543407E17D03B2D844
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
testBAD.txt
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Ransom Note
- @echo off title !!! YOUR FILES ARE ENCRYPTED - PIKO RANSOMWARE !!! color 4F mode con: cols=120 lines=50 echo. echo ===================================================== echo PIKO RANSOMWARE v2.0 - IC3A4K EDITION echo ===================================================== echo. echo YOUR FILES HAVE BEEN ENCRYPTED. echo. echo All your documents, photos, videos, and games are now locked. echo. echo To decrypt them, you must pay 0.05 BTC to the following wallet: echo. echo bc1qPIKO1337SCAREWAREISFAKE echo. echo Time left before permanent deletion: 47:12 echo. echo DO NOT TRY TO CLOSE THIS WINDOW. echo. echo PRESS ANY KEY TO SEE YOUR "DECRYPTION OPTIONS"... pause >nul cls echo. echo [ERROR] Decryption key not found. echo [ERROR] Connection to PIKO server lost. echo. echo YOUR PC IS NOW OURS. echo IC3A4K AND PIKO OWN EVERYTHING. echo. echo :loop echo echo FILES BEING DELETED... echo echo ^G^G^G echo timeout /t 1 >nul echo goto loop
Targets
-
- Target testBAD.txt
- Size 984B
- SHA256 e8d1ea78360c17560ea069c3944b22052d2c02a4126ad97b1393f00af87ef2f8
- MD5 a7a9d8d7ca4d6d8fcb64cd2a03c47495
- SHA1 c61f746eab4d036a28cbdc27314fa7c02f625c73
- SHA512 64916184e189132cce70bf8e0bc0a3fd16c7f6fd77862c0d2d2be53e479e901dd42f0903f47a60b466182a890e2d67a8521fcf2e72a81f9397e968076cc0aa8d
- TLSH T1BD11EF3BF141B692E1F25E999E7164F1F2213083B81E9C42E40B543407E17D03B2D844
- MD5 SHA1 SHA512 TLSH
Score3/10