Ransomware[.]Satana[.]zip

General

Target
Ransomware.Satana.zip
Size 34KB
Sample260819-nekhpsvsfx
SHA256 c63690801e40fcb42de087e3301462328b53d7bd7cbe7bbd8de498beb7065e31
MD5 0672084efff0a6907382c7a5d666fe00
SHA1 43300b13ba071f5bee966ae4c3fee8d3b8d17d03
SHA512 e1193575691c58c41c2fce651740b92edef338f1077333dd52b2a49c4195f4eb831e06bbe544e73381b65075e88edf1dcda850fb55e08039b53c6fc5827725fa
SSDEEP 768:GNKcgsGE4FpKnFwHsiazXeBET2UiWk6w5oiSD5O9n2e4H2Hp3:/BfLHxIOBET2Uvk6w5yD5O92x2HV
TLSH
T1FAF2F1692A6DDC8DE24AED79E7FF48391E480FE609EEE824218D4F7916CD814701B2C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ransomware.Satana.exe

File Explorer

Ransomware.Satana.zip

.zip 34KB
Ransomware.Satana.exe

.exe 49KB

Ransomware.Satana.zip

SHA256 c63690801e40fcb42de087e3301462328b53d7bd7cbe7bbd8de498beb7065e31
MD5 0672084efff0a6907382c7a5d666fe00
SHA1 43300b13ba071f5bee966ae4c3fee8d3b8d17d03
SHA512 e1193575691c58c41c2fce651740b92edef338f1077333dd52b2a49c4195f4eb831e06bbe544e73381b65075e88edf1dcda850fb55e08039b53c6fc5827725fa
SSDEEP 768:GNKcgsGE4FpKnFwHsiazXeBET2UiWk6w5oiSD5O9n2e4H2Hp3:/BfLHxIOBET2Uvk6w5yD5O92x2HV
TLSH
T1FAF2F1692A6DDC8DE24AED79E7FF48391E480FE609EEE824218D4F7916CD814701B2C5
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Ransomware.Satana.exe

IMPHASH a3bc0305643e7601d6deca72652f4ab5
SHA256 683a09da219918258c58a7f61f7dc4161a3a7a377cf82a31b840baabfb9a4a96
MD5 46bfd4f1d581d7c0121d2b19a005d3df
SHA1 5b063298bbd1670b4d39e1baef67f854b8dcba9d
SHA512 b52aa090f689765d099689700be7e18922137e7a860a00113e3f72aa6553e94a870bbb741e52de9617506a236a2a59198fb224fcd128576d76642eec9d715df5
SSDEEP 768:AbFw10RFnAwJM7MiqwecUaX5h4IuCdYa+XLXTGY1idL2WYiwtDj:Apw10vnAOIUaJh4IXdWXLXTWLfuFj
TLSH
T1AC33BF0ADA486E63C971B674EFB7EAFB403C544A5B7D38FB9B84004D053E2F5A163462
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

9488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Ransomware.Satana.zip

Ransomware.Satana.exe

ntdll

kernel32

user32

opengl32

generic

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Ransomware.Satana.zip

Ransomware.Satana.exe

ntdll

kernel32

user32

opengl32

generic