fddaad236d475bf897ac1eb80b786a694eee7e0a9ff1a44de435e04b41a0b7b7
- SHA256 fddaad236d475bf897ac1eb80b786a694eee7e0a9ff1a44de435e04b41a0b7b7
Password
infected
Behavioral task
behavioral1
Sample
167bf2356e65b04407cd2d8299a9b315f213808b04c341f6aad5820fc46a3c49.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
167bf2356e65b04407cd2d8299a9b315f213808b04c341f6aad5820fc46a3c49.exe
Resource
win11ltsc2024-20260709-en
Ransomware family with multiple versions. Also known as MailTo.
Detected unpacked Netwalker executable.
| resource | yara_rule |
|---|---|
| static1/unpack001/167bf2356e65b04407cd2d8299a9b315f213808b04c341f6aad5820fc46a3c49.exe | netwalker_ransomware |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/167bf2356e65b04407cd2d8299a9b315f213808b04c341f6aad5820fc46a3c49.exe |
Detected Netwalker Ransomware
Detected unpacked Netwalker executable.
Unsigned PE
Checks for missing Authenticode signature.