Overview

overview

7

Static

static

3

Release/emulator.exe

windows10-2004-x64

1

Release/emulator.exe

windows11-ltsc_2024-x64

1

Release/emulator.log

windows10-2004-x64

1

Release/emulator.log

windows11-ltsc_2024-x64

1

Release/emulator.pdb

windows10-2004-x64

3

Release/emulator.pdb

windows11-ltsc_2024-x64

3

Release/output.txt

windows10-2004-x64

1

Release/output.txt

windows11-ltsc_2024-x64

1

Release/server.pfx

windows10-2004-x64

7

Release/server.pfx

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    Release.rar
  • Size 987KB
  • Sample260808-cwpyzafr8x
  • SHA256 8f57de4b1a86a5a8b1fca189d3a7e21c3655af3e5d897cdc1af3bbd1a986a51a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
executionransomware

Malware Config

Targets

    • Target
      Release/emulator.exe
    • Size 369KB
    • SHA256 1ba720712beb127607dec5669d4299c64945a0e4ac4b32e90b25c3b40ff6f682
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Release/emulator.log
    • Size 13KB
    • SHA256 8a67fb436b850008d7c6a468731d9ce34287d793e9627822265ac7f5fd53ae54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    ransomware
    behavioral3behavioral4
    • Target
      Release/emulator.pdb
    • Size 4.2MB
    • SHA256 e2cc50dacb12e39a6523f0baace2b3711a562700f5b624b4ea45e78fc2652cad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      Release/output.txt
    • Size 92KB
    • SHA256 464c76596c3610f8de1a83644641ed952c6323b1187e525b983bad2db65566d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    ransomware
    behavioral7behavioral8
    • Target
      Release/server.pfx
    • Size 85B
    • SHA256 ebb2e38da29ed42f4e269ff4d4c4d46e675949f3d8fef334427be4253a2ab105
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks