Resubmissions
07-03-2023 07:25
230307-h9eytahc25 1007-03-2023 07:22
230307-h7dyqsge9v 1007-02-2023 04:27
230207-e28dlshd37 1007-02-2023 04:11
230207-er315sce2y 1002-02-2023 13:29
230202-qrj4tagh34 1002-02-2023 13:09
230202-qd156sad6z 1026-01-2023 07:55
230126-jsjfcada55 1008-09-2022 09:29
220908-lgbmgaebd8 801-09-2022 20:56
220901-zq1jvadbg2 8General
-
Target
PLAY.mal_.exe
-
Size
178KB
-
Sample
220901-zq1jvadbg2
-
MD5
223eff1610b432a1f1aa06c60bd7b9a6
-
SHA1
14177730443c65aefeeda3162b324fdedf9cf9e0
-
SHA256
006ae41910887f0811a3ba2868ef9576bbd265216554850112319af878f06e55
-
SHA512
cf8b097e4d8dae444c4759a6588bcc5769694d34675f17fed5ee6d0b7aa52ed44263b0cc73f4ff422182a01ad8d69b18a71110c4fc4e9dd2233e9cfe833cbd36
-
SSDEEP
3072:Yrl2uRkddO+iR7OZOQ+dzeIP9mwUGU3l2bxW1/9JnOC/fhKJ2hXh3lmG:22uyqOh2g8U12K9dtEWx17
Static task
static1
Behavioral task
behavioral1
Sample
PLAY.mal_.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PLAY.mal_.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
PLAY.mal_.exe
-
Size
178KB
-
MD5
223eff1610b432a1f1aa06c60bd7b9a6
-
SHA1
14177730443c65aefeeda3162b324fdedf9cf9e0
-
SHA256
006ae41910887f0811a3ba2868ef9576bbd265216554850112319af878f06e55
-
SHA512
cf8b097e4d8dae444c4759a6588bcc5769694d34675f17fed5ee6d0b7aa52ed44263b0cc73f4ff422182a01ad8d69b18a71110c4fc4e9dd2233e9cfe833cbd36
-
SSDEEP
3072:Yrl2uRkddO+iR7OZOQ+dzeIP9mwUGU3l2bxW1/9JnOC/fhKJ2hXh3lmG:22uyqOh2g8U12K9dtEWx17
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-