General

  • Target
    testBAD.txt
  • Size 984B
  • Sample260720-2cx8nsfz4j
  • SHA256 e8d1ea78360c17560ea069c3944b22052d2c02a4126ad97b1393f00af87ef2f8
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Ransom Note
  • @echo off title !!! YOUR FILES ARE ENCRYPTED - PIKO RANSOMWARE !!! color 4F mode con: cols=120 lines=50 echo. echo ===================================================== echo PIKO RANSOMWARE v2.0 - IC3A4K EDITION echo ===================================================== echo. echo YOUR FILES HAVE BEEN ENCRYPTED. echo. echo All your documents, photos, videos, and games are now locked. echo. echo To decrypt them, you must pay 0.05 BTC to the following wallet: echo. echo bc1qPIKO1337SCAREWAREISFAKE echo. echo Time left before permanent deletion: 47:12 echo. echo DO NOT TRY TO CLOSE THIS WINDOW. echo. echo PRESS ANY KEY TO SEE YOUR "DECRYPTION OPTIONS"... pause >nul cls echo. echo [ERROR] Decryption key not found. echo [ERROR] Connection to PIKO server lost. echo. echo YOUR PC IS NOW OURS. echo IC3A4K AND PIKO OWN EVERYTHING. echo. echo :loop echo echo FILES BEING DELETED... echo echo ^G^G^G echo timeout /t 1 >nul echo goto loop

Targets

    • Target
      testBAD.txt
    • Size 984B
    • SHA256 e8d1ea78360c17560ea069c3944b22052d2c02a4126ad97b1393f00af87ef2f8
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks