Overview
overview
7Static
static
1fsociety-r...er.zip
windows10-2004-x64
1fsociety-r...er.zip
windows11-ltsc_2024-x64
1fsociety-r...DME.md
windows10-2004-x64
3fsociety-r...DME.md
windows11-ltsc_2024-x64
3fsociety-r...ql.sql
windows10-2004-x64
3fsociety-r...ql.sql
windows11-ltsc_2024-x64
3fsociety-r...ig.php
windows10-2004-x64
3fsociety-r...ig.php
windows11-ltsc_2024-x64
3fsociety-r...es.css
windows10-2004-x64
7fsociety-r...es.css
windows11-ltsc_2024-x64
3fsociety-r...er.jpg
windows10-2004-x64
1fsociety-r...er.jpg
windows11-ltsc_2024-x64
1fsociety-r...er.png
windows10-2004-x64
1fsociety-r...er.png
windows11-ltsc_2024-x64
1fsociety-r...ex.php
windows10-2004-x64
3fsociety-r...ex.php
windows11-ltsc_2024-x64
3fsociety-r...et.php
windows10-2004-x64
3fsociety-r...et.php
windows11-ltsc_2024-x64
3fsociety-r...ay.cpp
windows10-2004-x64
3fsociety-r...ay.cpp
windows11-ltsc_2024-x64
3fsociety-r..._day.h
windows10-2004-x64
3fsociety-r..._day.h
windows11-ltsc_2024-x64
3fsociety-r...ty.cpp
windows10-2004-x64
3fsociety-r...ty.cpp
windows11-ltsc_2024-x64
3fsociety-r...iety.h
windows10-2004-x64
3fsociety-r...iety.h
windows11-ltsc_2024-x64
3fsociety-r...in.cpp
windows10-2004-x64
3fsociety-r...in.cpp
windows11-ltsc_2024-x64
3General
- Target fsociety-ransomware-MrRobot-master.zip
- Size 67KB
- Sample260730-rl28waaf94
- SHA256 72fe4acdf7dcd3f491b572e3d8ce2c1172ca16a5fa95057c6b28d55f9be89a6e
- MD5 6d54913e4e14b529ba21192a011f595c
- SHA1 591b973f2f47f7c533e41161f0ebe0b0885d5493
- SHA512 5c3757ef7934df8aa2ac36049f8865eff7a469a3583c5793d0445318badf4a67509945ed2e4125b04593ec75d9d2cb9d3e2fd5405dab799a99bc3116059d6625
- SSDEEP 1536:ffO+1fQoPKQt1/N8hDsdTOVXI+xoCFIh702+lX8bm:O+1ovmPiDeTOVYIoBuXKm
- TLSH T13A63E113F6103F11DE5F68BA96036B469B27D0821F1CF2A1FDC5A06410E7E9E13A97AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fsociety-ransomware-MrRobot-master.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fsociety-ransomware-MrRobot-master.zip
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
fsociety-ransomware-MrRobot-master/README.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
fsociety-ransomware-MrRobot-master/README.md
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
fsociety-ransomware-MrRobot-master/SQL/sql.sql
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
fsociety-ransomware-MrRobot-master/SQL/sql.sql
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
fsociety-ransomware-MrRobot-master/pages/config/config.php
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
fsociety-ransomware-MrRobot-master/pages/config/config.php
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
fsociety-ransomware-MrRobot-master/pages/css/styles.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
fsociety-ransomware-MrRobot-master/pages/css/styles.css
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
fsociety-ransomware-MrRobot-master/pages/images/jester.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
fsociety-ransomware-MrRobot-master/pages/images/jester.jpg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
fsociety-ransomware-MrRobot-master/pages/images/jester.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
fsociety-ransomware-MrRobot-master/pages/images/jester.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
fsociety-ransomware-MrRobot-master/pages/index.php
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
fsociety-ransomware-MrRobot-master/pages/index.php
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
fsociety-ransomware-MrRobot-master/pages/target.php
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
fsociety-ransomware-MrRobot-master/pages/target.php
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
fsociety-ransomware-MrRobot-master/source/after_day.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
fsociety-ransomware-MrRobot-master/source/after_day.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
fsociety-ransomware-MrRobot-master/source/after_day.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
fsociety-ransomware-MrRobot-master/source/after_day.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
fsociety-ransomware-MrRobot-master/source/fsociety.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
fsociety-ransomware-MrRobot-master/source/fsociety.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
fsociety-ransomware-MrRobot-master/source/fsociety.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
fsociety-ransomware-MrRobot-master/source/fsociety.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
fsociety-ransomware-MrRobot-master/source/main.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
fsociety-ransomware-MrRobot-master/source/main.cpp
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target fsociety-ransomware-MrRobot-master.zip
- Size 67KB
- SHA256 72fe4acdf7dcd3f491b572e3d8ce2c1172ca16a5fa95057c6b28d55f9be89a6e
- MD5 6d54913e4e14b529ba21192a011f595c
- SHA1 591b973f2f47f7c533e41161f0ebe0b0885d5493
- SHA512 5c3757ef7934df8aa2ac36049f8865eff7a469a3583c5793d0445318badf4a67509945ed2e4125b04593ec75d9d2cb9d3e2fd5405dab799a99bc3116059d6625
- SSDEEP 1536:ffO+1fQoPKQt1/N8hDsdTOVXI+xoCFIh702+lX8bm:O+1ovmPiDeTOVYIoBuXKm
- TLSH T13A63E113F6103F11DE5F68BA96036B469B27D0821F1CF2A1FDC5A06410E7E9E13A97AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fsociety-ransomware-MrRobot-master/README.md
- Size 1KB
- SHA256 b1987244c95c25349e05d191d3353d9698f3984d7e56b7137c11de2cebe970a7
- MD5 4026278c048785fdf215372649b661c0
- SHA1 97c7c12312cc43a48431329e75c7dd32b505bbdd
- SHA512 f44939f031abf290744f68111a214521e40841dbedaa5196df10f30902c774258c47396f9bc0111a7456ac03cdb47cfcd73836354109d5dfdaeeeb899b806335
- TLSH T12421F1967F6D9A7F464F528247E378519D4F60BCC3E717456A5DC489B203C0EE1D9090
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/SQL/sql.sql
- Size 1KB
- SHA256 dcffa1c97e60374370e3a061386c7502d26cf25c3b2816902847deac49762e37
- MD5 30eb32f81cc8b6fc858180318399a5cd
- SHA1 3a1415c05c17c01cc5efd5c87cdcf590de86bd61
- SHA512 b017136c4606cd40246c5c8a991524a72e9e77366edf56870ed82770ba9e8f9a0de97a68a702b223ba81fe394432da1d462abd8e21e73874ef63141e22efd183
- TLSH T1E6419A0D3F601642B25BC558D1D17BD3C837251B9A7AB8802EC4A29953017CB72BE6FB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/pages/config/config.php
- Size 251B
- SHA256 20bc501eb280922969598412abb360e71772c781b7020e584086cbb870e841f4
- MD5 6ca9a3cc867d5f52aa0ea5a3c6001fc4
- SHA1 1d0a255c107c15f2447cfe07a7f1df56fbb8bcf0
- SHA512 daef7254e33a1785c583bdc925bde92ee803448f663a15b1f36f2493456fc40438029af8f51479311ff0f4d0dc599e82f0a7ed362599939c33fcc1eccd9d0d6f
- TLSH T1A0D0A7A1BA9BEE92107F7C9F4F0385C4A09EACA33D2CC920745851E02F0568C8D9A14E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/pages/css/styles.css
- Size 1KB
- SHA256 ebe91b710c7e72d85070d925dddaa74eab06868d811708bc6c50502166d42da4
- MD5 a241ac46f1d3ba23a0dd47833b1cc2b8
- SHA1 bfc434540889d026c81d2aac9ce733a39e2a635a
- SHA512 684a382aef12e8cbc7561a0ccb8143fb52e45886a53a57f41ce0b205c2a75b117cae2f178b24f3d6033b2a96097c6a95e0c0ff762a13b475dd6f7e299e505d8e
- TLSH T1483154928EB3084EF4A388EE2BF54A1A23C84447530FC62B3F817198CF44689607334D
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target fsociety-ransomware-MrRobot-master/pages/images/jester.jpg
- Size 21KB
- SHA256 cb9a0ca4ccf39dc8a4301e3a8a1d658f654ec5455e5c138e237ad346ad14abe0
- MD5 5c69229b383c83ad6bba8082c3ea60d0
- SHA1 712442b8ab61a063f262e7d5e4c37b7488c3c2f7
- SHA512 d19501545bf6b1fbf0dfb1fef8a40e95aa90fe761999f4393be4dca0dbee1bfd3fd25b3dd408a9c827f2c60765b2dde4b04f3058506d2c7e2c1491efce2022cb
- SSDEEP 384:4qRMOqFLbW0eMtSPio1EOfmJwRcoS8H1CFaP41kYhk1vyicqK9cuk:4qyOqFbtK5GOfIw52acVksicqSk
- TLSH T108A2BF99DAF3B8E1C10E0832AC1C3BB0DA61612DF30AFD215BF09E55DD97706458D746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fsociety-ransomware-MrRobot-master/pages/images/jester.png
- Size 49KB
- SHA256 d75afeb67b48b4c56e9d1835d131ae8e33da7b291e1c00cddac9c17dbf4d28b3
- MD5 bb9d2a8f13048a40b8e75330a5125dee
- SHA1 f7aa221b8aba90ba9edf1e69e562b1c35d8a4318
- SHA512 8bc1441ccc0dc90b65df89ba4f779edd672029a075a03d62bd4daec201353c3d89ff38da52760ff1a8db68722741d5dc6a951aef9d8d1212ae1904f7694a8c99
- SSDEEP 768:uI+JjhHJI4i0R/f0Gy15vYczJ8Qa1Hba1pxCZthCylRrBRH+lXB:uXhS4iuM9vP18mhMCuBRH+lXB
- TLSH T18B33D038F5BB340B9844D7321EA955998EB74283E0C62E81B2CCEC314F897485DBBA95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fsociety-ransomware-MrRobot-master/pages/index.php
- Size 2KB
- SHA256 40e4452628e0a6859c1e21e4a4a6f5674665e16258730c4b9bc0b6689a339cfe
- MD5 07884459c85d24e868a4e8db88451516
- SHA1 663a440d37e965ce9f605555e8d99bbf4ab2dfdf
- SHA512 4b10ef0eca72a1f20f37e05a5f221a724dc70eb9e74127515bdd7e4d0746190cbeddcc7f2a8a48b7df22e2ce8a44fdae71ce55d01333b8dcb29c1369bd110c77
- TLSH T1B8410DC5B4978F2BD25256C376830B223B91891EE20552143EED50E91FFAC18FE5F150
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/pages/target.php
- Size 1KB
- SHA256 4ddab848ef9cb96b65cc0b6f1cd28d633f0028f230448b2c3362b4ae7393b023
- MD5 8f3a4848811b0f9a0e031bbf50db753e
- SHA1 c5df1fd86ad1e41efa49996d3895cba1cbcc01af
- SHA512 a8bd7a0322ab86e92d9a71b1407cdf09244d8b337dbebbede88266332ee6be86b90cea843fb0a471be8805bc56780765a7f7584047adbef325bb1c75ac6fd244
- TLSH T1D6110540F4536E62C76A9D5E4F41C2D0370983D23244D648B49ED1930F52D54DDFF2AD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/source/after_day.cpp
- Size 1KB
- SHA256 57c2f6783c5af5309f4f5eebdc0721fe1840ef36b519a3227ce75c491e21e73b
- MD5 83a64efcfbee85582246acefe35dab13
- SHA1 fb6fbb176452185b91af3860786037aa0fa3a688
- SHA512 ab7dbeddaba2346fede2baa464a40afff64e88941e5775f3e897963fe102f2c9256559d100ad2c89035bb9366ca254a524261e45e73151bb007b8b47a3f6a904
- TLSH T118410E028A9F6C076F56C24943AB20DF602665078BBCEC19F9625508AFA4354E2F47FB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/source/after_day.h
- Size 359B
- SHA256 65a743a5f6d28ee88eefc16331488199336a21d26c009be278a47410f8472974
- MD5 7f692477b5f748c68458220b90c5ddf0
- SHA1 c7cf0ba2e20d42590ac8b2d0f2bf54f3039b161b
- SHA512 fca82ff4ec6e84b84a21e0ff6bfaeddef985fc05f568a154b5538b780a5816dfc18bfbd41f92507a4f5135db3e92bb237bd87f5f03a450c374925f0dee59e705
- TLSH T1AEE0C01AE49C04902D370183310E08304019F7B7C3C57A46BF437C5958163D820F67FD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/source/fsociety.cpp
- Size 4KB
- SHA256 a0cb5119be2f1032865740743f6ba67bf1028f28ab13bedb1f105457a43667b6
- MD5 3cffb70a2313ff6afdd35cf20a7572bf
- SHA1 84b076c941156f64e44a81bb54e0f5e3e289cb34
- SHA512 032e24a6e458b95f97b0b1c4f8880c5210d84ae22172f9e992abe925c45e871f5189866e9ea0ff9a73326165b5c89a42b6af1aa77e207a2e03af9b292d241661
- SSDEEP 96:XnkQMs+3ri7g/ZWOttzpX6QpLI1bM27AraRBCMpRK2bbEhWD/S0Nnm3yqzWCpJKR:XkQMs+7iU/ZWOttzpX6Qp+7GcBCMpRK6
- TLSH T15AA11112EEF7ACE233F783971B73D4006251A52B470CD9167A5D22846F8565A91F1FF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/source/fsociety.h
- Size 840B
- SHA256 684ffe8efded3386148df2a90557d6abcb11a38353f1696e9de3b338d233e074
- MD5 49ad76322e8415c3566af0784471b91b
- SHA1 b244fba4843dc91a185475f6081032bf254510ee
- SHA512 21e41325095f5d535b09a23992ec7b09279967a19daee4b62aef4b5e4ee3bec2bda799ea0838c828b620224bdb8583e99969e56e21ced3c9e25ee68f0eeb11e6
- TLSH T1FF018850E8B8A8A3F1E24613276784A56092A933D2448C706E7F7C40AB831C624F79B0
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fsociety-ransomware-MrRobot-master/source/main.cpp
- Size 806B
- SHA256 b73d795bf4b4127be19c8680fd1f025de146118e943eb89d32ddd95b58dab1e1
- MD5 c52dc0b0f927951c89eaab5c9216cd54
- SHA1 33d166650e5071775e98bc89d97b706d0d2b0866
- SHA512 d228dc5cc066b02886bfe4ac461463e6f51741c9eb2c8167350dc82cb1228bed55fdf7a630009841432daf3398bd1a6cee7518943bef2642b1fff3f1cd46bb38
- TLSH T1E5018E02E8FF08569037469BA3AB500A0146DD478BE4C5AD3B66FE45AF3104FA4D66F5
- MD5 SHA1 SHA512 TLSH
Score3/10