291c0e34a302b27d0349c77be3a8a24a135ba6d398571e836c93d7dcc9ff4149
- SHA256 291c0e34a302b27d0349c77be3a8a24a135ba6d398571e836c93d7dcc9ff4149
Password
infected
Behavioral task
behavioral1
Sample
853fa18adc3f9263a0f98a9a257dd70d7e1aee0545ab47a114f44506482bd188.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
853fa18adc3f9263a0f98a9a257dd70d7e1aee0545ab47a114f44506482bd188.exe
Resource
win11ltsc2024-20260709-en
Ransomware family with multiple versions. Also known as MailTo.
Detected unpacked Netwalker executable.
| resource | yara_rule |
|---|---|
| static1/unpack001/853fa18adc3f9263a0f98a9a257dd70d7e1aee0545ab47a114f44506482bd188.exe | netwalker_ransomware |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/853fa18adc3f9263a0f98a9a257dd70d7e1aee0545ab47a114f44506482bd188.exe |
Detected Netwalker Ransomware
Detected unpacked Netwalker executable.
Unsigned PE
Checks for missing Authenticode signature.