General
- Target 7242b0aeaa1e5665a0d13d5bf1c47ca4c3344c43c2cb1775e2d30761e2114af0
- Size 491KB
- Sample260812-fr2zhsaf32
- SHA256 7242b0aeaa1e5665a0d13d5bf1c47ca4c3344c43c2cb1775e2d30761e2114af0
- MD5 ea9e8be97523e51769574068216ac2ec
- SHA1 b5f96bc664088f0c09a5d1f3805d548578162964
- SHA512 02257c4dd3bcda007dff41d896fd52f2b9bfddb50cd6a4932816d134b39d776d91a78f8cf6d81a7688a2affcff97ed48d7edf87a9d6db3b34abb5245e1ade073
- SSDEEP 12288:LmrYe7CQ4E0Hp/HRj2Zs+y4hNuzXWlNmgJ1fF2mHY:he7CEkp/HRjKs+y2NAt61u
- TLSH T143B433AC16BEAFAC14D68F31DC091C2BE87151192CF3C6C54428636F411ABEED99E72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
555964b2fed3cced4c75a383dd4b3cf02776dae224f4848dcc03510b1de4dbf4.elf
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Extracted
-
qilin
-
ransomnote
-- Qilin Your network/system was encrypted. Encrypted files have new extension. -- Compromising and sensitive data We have downloaded compromising and sensitive data from you system/network If you refuse to communicate with us and we do not come to an agreement, your data will be published. Data includes: - Employees personal data, CVs, DL , SSN. - Complete network map including credentials for local and remote services. - Financial information including clients data, bills, budgets, annual reports, bank statements. - Complete datagrams/schemas/drawings for manufacturing in solidworks format - And more... -- Warning 1) If you modify files - our decrypt software won't able to recover data 2) If you use third party software - you can damage/modify files (see item 1) 3) You need cipher key / our decrypt software to restore you files. 4) The police or authorities will not be able to help you get the cipher key. We encourage you to consider your decisions. -- Recovery 1) Download tor browser: https://www.torproject.org/download/ 2) Go to domain 3) Enter credentials-- Credentials Extension: o7L03e8F9J Domain: 73drzy7olfr6qn2mgzavx2mdrfr2w47c3yo7x3urtfh4kgsj2sdx27id.onion login: a4r1PcL5RukvOqERpdoic5e_UNEzK9Dz password:
Targets
-
- Target 555964b2fed3cced4c75a383dd4b3cf02776dae224f4848dcc03510b1de4dbf4.elf
- Size 1.3MB
- SHA256 555964b2fed3cced4c75a383dd4b3cf02776dae224f4848dcc03510b1de4dbf4
- MD5 417ad60624345ef85e648038e18902ab
- SHA1 e18e6f975ef8fce97790fb8ae583caad1ec7d5b3
- SHA512 e69d97207ab60aad5fbac2a621ec93c8acd0968c54f394cc4dbd15e6bd0112e0725be149dc12838b6b147ff1287a9bcc84b08342ce30a2acae9e222e3bec4324
- SSDEEP 24576:uSPlv7cTY7Th7pfI3Wf9B1QeszlIJuW6WJWoYvXMfiSvd:u2v7cT8Th7pfI3Wf9B1QeszlIJuW6WkE
- TLSH T14A55D633A6B186DDD08AF1B8698BD0E3F868F0F80266305B27DB5D267E69D510F8D1D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10