54a6cde2...fc18 | Files
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Trojan, Ransomware

gqtuso.exe

Windows Exe (x86-32)

Created at 2019-09-04T00:39:00

...

Remarks (1/1)

(0x2000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

Remarks

(0x200001d): The maximum number of extracted files was exceeded. Some files may be missing in the report.

(0x200001b): The maximum number of file reputation requests per analysis (150) was exceeded.

Filters:
Filename Category Type Severity Actions
C:\Users\FD1HVy\Desktop\gqtuso.exe Sample File Binary
Malicious
...
»
Mime Type application/vnd.microsoft.portable-executable
File Size 92.50 KB
MD5 bbb38219ae8cd8baaea964c647be77a0 Copy to Clipboard
SHA1 19c272d0ec29a1356e74e5e29edfdb1076e8040e Copy to Clipboard
SHA256 54a6cde2a40da13331d3d5715878155697c5f5d794a457684443b276cef9fc18 Copy to Clipboard
SSDeep 1536:mBwl+KXpsqN5vlwWYyhY9S4A0Lia3Z5m+O/NW1PrWaSe5pa:Qw+asqN5aW/hLxYZc+O/NGqH6 Copy to Clipboard
ImpHash f86dec4a80961955a89e7ed62046cc0e Copy to Clipboard
File Reputation Information
»
Severity
Blacklisted
First Seen 2019-09-03 21:47 (UTC+2)
Last Seen 2019-09-03 22:10 (UTC+2)
Names Win32.Trojan.Crysis
Families Crysis
Classification Trojan
PE Information
»
Image Base 0x400000
Entry Point 0x40a9d0
Size Of Code 0x9e00
Size Of Initialized Data 0xd400
File Type FileType.executable
Subsystem Subsystem.windows_gui
Machine Type MachineType.i386
Compile Timestamp 2017-03-02 23:49:06+00:00
Sections (3)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x401000 0x9c25 0x9e00 0x400 IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ 5.97
.rdata 0x40b000 0x2636 0x2800 0xa200 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ 7.79
.data 0x40e000 0xaad5 0xa800 0xca00 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 7.98
Imports (1)
»
KERNEL32.dll (9)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetProcAddress 0x0 0x40b000 0xd508 0xc708 0x245
LoadLibraryA 0x0 0x40b004 0xd50c 0xc70c 0x33c
WaitForSingleObject 0x0 0x40b008 0xd510 0xc710 0x4f9
InitializeCriticalSectionAndSpinCount 0x0 0x40b00c 0xd514 0xc714 0x2e3
LeaveCriticalSection 0x0 0x40b010 0xd518 0xc718 0x339
GetLastError 0x0 0x40b014 0xd51c 0xc71c 0x202
EnterCriticalSection 0x0 0x40b018 0xd520 0xc720 0xee
ReleaseMutex 0x0 0x40b01c 0xd524 0xc724 0x3fa
CloseHandle 0x0 0x40b020 0xd528 0xc728 0x52
Memory Dumps (2)
»
Name Process ID Start VA End VA Dump Reason PE Rebuild Bitness Entry Points AV YARA Actions
gqtuso.exe 1 0x00400000 0x00418FFF Relevant Image - 32-bit - False False
...
gqtuso.exe 1 0x00400000 0x00418FFF Final Dump - 32-bit - False False
...
Local AV Matches (1)
»
Threat Name Severity
Trojan.Ransom.Crysis.E
Malicious
C:\$GetCurrent\SafeOS\GetCurrentOOBE.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 140.95 KB
MD5 abfa84c704a108f5e0ab3709d6d96451 Copy to Clipboard
SHA1 ce7261a806207e8cba1322de61b06b5b4acda638 Copy to Clipboard
SHA256 dea5c794a92d0646dfaf955be28cec14abe152fcf5b6140cc014875cf6e650a6 Copy to Clipboard
SSDeep 3072:L8nJV7s2iyPzGqRXRHqMylKAwD+v70n+uYlNswD:sV7s2jGH3Kev7I+vswD Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\$GetCurrent\SafeOS\SetupComplete.cmd.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 566 bytes
MD5 6bb6d035a772017d6ef5965b9a81cd7e Copy to Clipboard
SHA1 4482bae310fb08d0bf0d721805484aa6890b760e Copy to Clipboard
SHA256 20cbc5fa00faea5a1843df8fea545c2216187ec16b455dfdec962b1b6e2644f5 Copy to Clipboard
SSDeep 12:moBhhK6FJBFKER85czCLjKduy6+W68FH8lZ1aBau0aaUVyERlKxmnB:bw6FT9GhjPy6HZFH8lOh0EVjRlKx4B Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1025\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 17.09 KB
MD5 7cb050df5ae153891aa789a8fd6b7949 Copy to Clipboard
SHA1 5251bfa82891543faf579187e6ef8c9d3fff5252 Copy to Clipboard
SHA256 7e93fb90aada44b76d8b5265eb2e9b20a74f89f25bdd9fd705148befe30e11bf Copy to Clipboard
SSDeep 384:B+oJh3T+/f9H52hP2tR3a/FDkxes/hlcde4ZPzKWZU6dez:B+oJN8D2hP2cCbchZPhZU6O Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1025\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.61 KB
MD5 68ef26b8ba4a5bed7dd5da08dedc40c3 Copy to Clipboard
SHA1 b64449422313ca1631ed5b64b6f73a5b0c36e584 Copy to Clipboard
SHA256 581db760b36a703fb8a4d546728f1179b928f100f26c8699480c59dce1bf9494 Copy to Clipboard
SSDeep 192:E91+nIOrhf8vccRVmALqM+M2ty3YB28jB/X1Hw:G5nccRtLqM+i3Ed/lHw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1025\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 72.72 KB
MD5 150cb4f1a615068a439090bb23648d20 Copy to Clipboard
SHA1 5624e15a1e65107b3385e5539b754cc0fe3ad110 Copy to Clipboard
SHA256 f9b3003a37b6ae0407a54ce2794ed48da0b0005bd5e094af8d13affc0b296953 Copy to Clipboard
SSDeep 1536:2WG/2CfSKsdgfjcC0/0B7d54K3bFCvNVdcTDtSX7+BsOPPOzTk:2pZxrcW3O8TDgXySOuU Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1028\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.09 KB
MD5 11fb9ab0d6b96bfa071cdc5ff0441860 Copy to Clipboard
SHA1 2dee26b61cb2151e3235e4529b22c82f2f69c2c2 Copy to Clipboard
SHA256 e7532458abdfad1c218843b15244e616b78ab6d6c4cc837e729690b5e9dd293f Copy to Clipboard
SSDeep 384:q9SOFQoApu5Ay85ZLZuwNg382VN6EPVrONNxC8f18:q9ZFTdLVu2VNTPt6NxC8+ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1029\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 5adc35527982bf01b5ce70e0702c5abe Copy to Clipboard
SHA1 6deff3d24ebc18bcd5c584cc4e0ef0db3c5947ff Copy to Clipboard
SHA256 307f03b13aeb3afad3bb0bbb2385df4134af7fdb5947d29d00fa11fa04f29035 Copy to Clipboard
SSDeep 384:v5Ysn3zYXQOJXgnpdc7qeXz8Gl9P0Nk8KKMchUbCJYbA5n8JDQceKDWs:v+I30xRmeXTOmoMjmJ0A+JcceKDf Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1030\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 8654d53a6b1e4a90483ef6ec1d593675 Copy to Clipboard
SHA1 353b76c09fa22c0b4f939c63acc125f020e1957b Copy to Clipboard
SHA256 e7ff68386835d53250fb4788b267f99e2415ee39e1f28d64dbc96193f8feee79 Copy to Clipboard
SSDeep 384:LcOcc/g7gz7Xk2DxMVRPe1ZJTO5BATolRWvuIek/3HzShawSD/EzTh/geYn+e29:LF/HzbdCnP/yoDHIxShU/OlgN2 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1032\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 19.09 KB
MD5 4f38e19684ce213c5a5a1cfcf6934123 Copy to Clipboard
SHA1 1b3432532a9262ee4d98668c3a621928c53595c8 Copy to Clipboard
SHA256 21f831762f0d707925b63045f4af3a084088b8cbae9eef3e4d5a1bd2f3df911e Copy to Clipboard
SSDeep 384:n5cXclivAtFD0r9fQvLI8NDC+5ee+mSsZoTVFVclQRwzZQkqVj5ozIlT:K9vAzI0te6h7/liwzHqVNozGT Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1031\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.59 KB
MD5 a5a38078d6e0fd67281d2d9d95553d8c Copy to Clipboard
SHA1 4b7fcbcb8fade839a27157a2100627553a990962 Copy to Clipboard
SHA256 bec23b1e385dd82ca3519683ae647238d266a4019c1071906513de8f0f407b29 Copy to Clipboard
SSDeep 384:4BX4/4tDe3ZGpZm1DWsu80qKePc3q8usUD6r42fV9iZvxfioirv39PuT:4BsoiZSWDWsl0qHsFc2Lina1rv39P8 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1028\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.39 KB
MD5 45f06d5317ec4520d1e3c78c795763d2 Copy to Clipboard
SHA1 319d3d95649d72316158ef14b4cc7bf9887f8acf Copy to Clipboard
SHA256 f59978be86d57233f4499ab1de10852ffae4475c5a4657d0c3696e6d27e82f9c Copy to Clipboard
SSDeep 192:ofHV8aY9iD+VIrVx8NgEhDuPsdYFMWuAcYjQIP:+4XiVSCYD6sdHamIP Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1035\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 38e899c0f1c6a9890c386fee86b36a3a Copy to Clipboard
SHA1 5deacf2f8057b55d08b5a74f1e9ed8be4b1fe78d Copy to Clipboard
SHA256 f3c99f19768252eff354b2dba828d71d138c68ca4283adb810107772c8b9e4ee Copy to Clipboard
SSDeep 384:YWxQOxE+K+d/L77bXRjAyq3cRtscGzbkNhAnGPDPhnxUmuJA:XDK2/LzXRjqIH+EeG7JIa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1036\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.59 KB
MD5 ee8ab33c0c9e19bd8fc5c19668d27890 Copy to Clipboard
SHA1 6cd5ec876d71ec4a1613237242be4fa3465c2423 Copy to Clipboard
SHA256 279704782a9873669a2a0dee71188fec1932ad5120118acbef213cf963187dfc Copy to Clipboard
SSDeep 384:BYvhZwuFRvZH4uxiAHXuCzuWaaetl/Q0uSszpDUbBIO3GEhS7Kq7Zr/BQ595sg:BGZwuFRvV403buWaaeb41rpYaMph/q70 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1040\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 6a3701aa059d678cd816c4e0301f5c52 Copy to Clipboard
SHA1 ba9c320b13ba9febcffd733668082cf4f93dad21 Copy to Clipboard
SHA256 012ef90e7362484862eb49e8a845388dd2bca57bb70042f7a470321fbe719885 Copy to Clipboard
SSDeep 384:OLoewVy1qzJF3x1ezX/RJK4yQAuvYuHS97g23PoL+INgnBhyc8trFy+wkFrlk:OLzqz9MzX5JcuvYu+g23PoLfcBNIrFyn Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1037\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 16.59 KB
MD5 f68347c0439acd7003eda06a7a13b882 Copy to Clipboard
SHA1 54f432d9dcc8575a73fc8cfbb895f4a8ef07d7cf Copy to Clipboard
SHA256 cc97fc053356019969c1491e9e1b20ed2766189fff69f7f4155345f21aba5fd3 Copy to Clipboard
SSDeep 384:26mOR/ZCtgd77EKIdjdOl4kS42dQevX6tLx:9mO3Ca73IdjdOvc1vX63 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1038\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.59 KB
MD5 da5579c376ac9b816ad1a955970e317d Copy to Clipboard
SHA1 743ea5e2cd89cd76760d701598a563facb7a325e Copy to Clipboard
SHA256 6920ae71d6cb5200bb24e071b8f6d7becd685219e3616c4c5395041154c66aa7 Copy to Clipboard
SSDeep 384:1GL8KRo/MBWzIkIK7taYKDAO5j/ALfFm3+3MZl8Ri7zVESLQ5:1HYsI4axDAO5j/Az03RbzRLg Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1041\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.59 KB
MD5 886eb0568a4a0f47caf89086d64f55b9 Copy to Clipboard
SHA1 ee9aefabe7e9ad9ec77d2de9e8f96639aa03559b Copy to Clipboard
SHA256 f417d2c9101ddee108021389823062c41dc2341c5a862f120a143cd3ecdd9459 Copy to Clipboard
SSDeep 384:RCjEEbwPS7PSyMQBFWFCc2igc/PJvfLN/L7olJ+8y:kjEEcPSLLMWnc2zc/PdF3KcP Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1042\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.09 KB
MD5 ec034a473d549a4a447270418c0a4358 Copy to Clipboard
SHA1 150d289ff0e66e06eb6fc7dbf4def7f0841302ec Copy to Clipboard
SHA256 ca1032e780a501f943ce71fc7daa2cab49700213898e166524f13a93bcb7d644 Copy to Clipboard
SSDeep 384:6bm8BGAPjWq/yuN6jWKhy1+aEOwF1B3jtfEPxqWIR9KwuOeBquR:6btBGALHWVOwtygswuOO Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1043\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 19.09 KB
MD5 114ac32d7e08dad82e44f830dcdca62a Copy to Clipboard
SHA1 ec51f4147c372f86c78245a7a9fb213b87c38013 Copy to Clipboard
SHA256 bc794dcc9b387c260ebcef3d8830ba46ace808df540d5de0e5e067014a29d7c0 Copy to Clipboard
SSDeep 384:EArEEkEbiDXd5leRGjwcgrjK04IHQygUBAMKwnTAN1OVmdXb0dnxLXwgnBZx:EArEEkEbiDXd5KGCnA0Bn8NYMdr0dxDX Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1044\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 17.59 KB
MD5 10dded990fefd02b66b8c4cfa0a8f15b Copy to Clipboard
SHA1 5c9ffab023ce39081d1ed61174c5acdadc0e49ac Copy to Clipboard
SHA256 9d79206d170323e6fa7f5ca0628b1a9c161dc22d417ffcad20db526c850e731a Copy to Clipboard
SSDeep 384:5pWXSpboO6vQRO5nCF0Wqwt+Bs7dteZC5TJcsPKVawtA:5pWCb6vN5nPaBteeVcERwa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1045\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 b7fc1fc8fab7012c255453aa1979782f Copy to Clipboard
SHA1 66b5ce90374982e9262293594fc7a4e48056f5c2 Copy to Clipboard
SHA256 43b09bb6e6f5780ed77b283669c6e0b7a7a2a00f15a7cd76759ccc9aab2286a7 Copy to Clipboard
SSDeep 384:A8XOgUUh3GB2RLj3P+WU96BqB7/MYfGJso+NSIHJjh0xaSx1:A8XUUh3GIRLjGUaTJfwsJNSIp1g3 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1046\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 e46ccefd6a0adae264069d8eabec432f Copy to Clipboard
SHA1 7653fc8ce5891f7e0f3a229e3f61a58a6da1cd90 Copy to Clipboard
SHA256 e354b4e25ee2872d156a7727114be10df066aeb4c8a6d0a20a50173b70803e3c Copy to Clipboard
SSDeep 384:ax8yW526qWaAznk2kLK8KLnfGmDeNrCemxjcLFz9xICCNvvqY5K4gTvP0o1f:aejI6YskLKZfGmDeNCemEdXlQyG1Po5 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1028\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 59.65 KB
MD5 069ffa30b82ff952ccfdbedd495d1f0d Copy to Clipboard
SHA1 2ea14da2b61620dcb1b76000303d046fd5c901e7 Copy to Clipboard
SHA256 38a0076626801a925bce8493c6979ef497176c761c9db62987942941bfaec7c4 Copy to Clipboard
SSDeep 1536:59ehbas7AzPFH+LdSCcqZrvRAWLI1XLA2axv9elsIFJp:KbNLVc+bSv1XLAdh95IFv Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1055\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 17.59 KB
MD5 f2ce9386f6d6fbd5ae79f5c45bde50c8 Copy to Clipboard
SHA1 cc32fcca96574f312e87358208c7f22c4b35e748 Copy to Clipboard
SHA256 3b3b2b2d36ab56e43176af4beba07ff4643ad242246d3b11d58b983efb7cf61e Copy to Clipboard
SSDeep 384:G0ssjDFNeW+M5cMVGYal7PcCX17uOwd1ial+6E75J5N4NHc9vK:oWqM57+PcCXYOUES+FDNKHEC Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1029\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.86 KB
MD5 c85cbd63ef1ef4bcbc55f33cbc61e2ef Copy to Clipboard
SHA1 e66720f058465aafd2192ef47b4d6502133ec8da Copy to Clipboard
SHA256 eadff1f1de45de53347d302e1ba08dcb168c8bd866acf7716b027c23c784e164 Copy to Clipboard
SSDeep 96:/HXkZP/DqulWoeGWTiSSew+YHTJDBCgV7+bO75K/:fXaP/DBeCHTJDgGd0 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\2052\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.09 KB
MD5 6c8f18a6a4d143722c631d0f8d8d79b6 Copy to Clipboard
SHA1 437f2e94a30ec68568c036788bc72ed585ae1de8 Copy to Clipboard
SHA256 6ad5ce19a5d482f6ea113ce6a2014f3ed26e82c19e7accac05201c6c60612560 Copy to Clipboard
SSDeep 384:6JhK8+7fdmw+T8R8VDXvGoHPP9q3Q8bqYYpWdiRU:YhK8WdB9wD/Gov9gqYkWx Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\2070\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.59 KB
MD5 254fbaac2e96ef0e0570cbef7342ecb9 Copy to Clipboard
SHA1 83a7dbda528c9d4955693b88fb9956215cc1640c Copy to Clipboard
SHA256 5280a05864a03eabd2021d14e71a6397b07a8b7c7392a3bc72f53f85c9f380e4 Copy to Clipboard
SSDeep 384:A3oxj+YEIT54dyTOtrjNCf67+27659rBO/EDz+W8ISOHWLm:A3oF+YfT54dbrj4f67VO52VwSGh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\3076\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.09 KB
MD5 e5cc44fd072f4ab2218109e871061eab Copy to Clipboard
SHA1 f7b0306ce8b786e206611cb51df12fc79e8eea67 Copy to Clipboard
SHA256 851d810f1070e4b71363a50de3fe96d8ad8ca711b7eb7f856a384d682138968a Copy to Clipboard
SSDeep 384:LnhQd4kZrYYM1mLIfqX1DuiyVckJxYYEVyRl/BCBrkj2:yd4ErYYK/iFDjockiil/IBX Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1033\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Malicious
...
»
Mime Type application/x-dosexec
File Size 17.09 KB
MD5 b75b31eda17574343fc47bcaa048e5c6 Copy to Clipboard
SHA1 65efe73716e6772186d94704208e3968efe163a8 Copy to Clipboard
SHA256 a57a6380e4ad38dfc9fa80ea003e43efea97a8c3741286297eda9bd69810e84e Copy to Clipboard
SSDeep 384:2PLdI1EztSWfk9Bvc5T//02GwQD9FdBXQhobiDFeiVRRTZRd:2xhSWfk9BCjjGBTvXQhqiD8yTV Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\3082\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.59 KB
MD5 47b8ee4d0a915ae99fa2eba7143bad02 Copy to Clipboard
SHA1 05d7676b7656048b41a390320b804e98c19e6512 Copy to Clipboard
SHA256 178829be5435cf7536c57edbac3d5e9f063ae7ad60661723e020cabd8fe10d1a Copy to Clipboard
SSDeep 384:N3CmKWuxBSSDVc1A5k0+awd/YAQhpmmNw9JXuKid8sLHzYCcfBV18NhQTNfYUD+V:NS3CSDVN9+ZYhcm7lTYCcfX1KhF0i Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\DisplayIcon.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 86.71 KB
MD5 60a0035a7b957af74ddd5ca0fd64ab41 Copy to Clipboard
SHA1 9cb491186ccccf916d9a7f54a418fdf62e409abb Copy to Clipboard
SHA256 5c5fa9ac836a921abf6ebf6e30172ee750d3cb715d94b59488279c1065888dca Copy to Clipboard
SSDeep 1536:9Ke+k/DPxhZGTKD1ZBrDkcHP+IM7zWymdH4yyFrF0/ZKBH1SWH+NCCAka3jdmQ0:9Ke+k/zxhZuqF3kIM7yymVOrF1BHMrUU Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1030\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.47 KB
MD5 de1bee3e06596e3ec446fbd9508d2c8b Copy to Clipboard
SHA1 0a10c7db6a600a156288cf297539c617adf6e654 Copy to Clipboard
SHA256 be717b875f666fcfe69c53e46f2d66305e685c9a6e5515c2b73b3f9a2947655c Copy to Clipboard
SSDeep 96:ULc4N0cACAzg9BCQQ/obyT1Paa9NpsGN9:cJNKCAbQQtsa9sW9 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1030\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 76.18 KB
MD5 03a094b6ac720c78cc57618901b0577e Copy to Clipboard
SHA1 9c0682c64303c4b379f2229b96d6bd5a0b98d447 Copy to Clipboard
SHA256 41cd5af476b44d0d91a8cb1e194a06bbb715654eb6147b2820aa8e67f038c992 Copy to Clipboard
SSDeep 1536:qmWSUvYmUHFqhI+i9CXGKIm0tegt6iUlqRRQ+U:ZWLYLHItivVmLgt6ToRQD Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1049\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.09 KB
MD5 07545dde4b7c097dd0f19429fd731827 Copy to Clipboard
SHA1 987c133430066b1794bf644e2dd27d8a91df8fcc Copy to Clipboard
SHA256 a0d31251d3c12cb1a9ee245f58c36fe6bff7ce743559588604ba62138c337f4b Copy to Clipboard
SSDeep 384:Web2MW/Ogt6t8dTxl5oTRyR1n4RvDiBkDBv0pYK5sGalMNis2I4c3S:zbVWGgt78yR14R7iBcB8pYKiT+2F Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate1.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 cb681abe1727571024b1aba0a99663a5 Copy to Clipboard
SHA1 155f790397bde17aace51818a8752f6b419fcbb8 Copy to Clipboard
SHA256 a6d9688f635f5c68351cc6cd165133a897d0750fcc223a9148de82499e035860 Copy to Clipboard
SSDeep 24:B7N3Ylgs95kxUpa0oSULIFYCPBylPklKlSg1uRAuz1MPVjRlKx4V:v3dswUpJiSUlb8iu8V3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate2.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 27512d444133521b7d50ef0534374a9d Copy to Clipboard
SHA1 27e0c628eb331c748f1bae51d06580267178386c Copy to Clipboard
SHA256 37844d9c7c63508718b7255379bd1000a55d127c1421c2e93328b01fb0ab7bd3 Copy to Clipboard
SSDeep 24:CTIp8i7h/hxenlPyAOMh34p/IDkfj0YeiTH/znTIJtjmmsLRVjRlKx4V:CO8sh/PTp/ID9+bQJtjWFV3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate3.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 b168a40204392609680f47ff1b5d48e9 Copy to Clipboard
SHA1 3aadeecc547365d626d245693b2426fadd0978f9 Copy to Clipboard
SHA256 af307909b882536db105d149fd0854e229e55ffee02f711e2d7d641db14092ee Copy to Clipboard
SSDeep 24:MIrwKXAqh94eOzYmhkI/lFXS0qkOUr6yhUO6hf+yR++VjRlKx4V:MIssPWewYmCI9FjSyn8fbDV3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1053\SetupResources.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 17.59 KB
MD5 f1e64a8863a69678584b622e39e11bcb Copy to Clipboard
SHA1 068508832b856eab59e5681173807e1d1f1cbbd3 Copy to Clipboard
SHA256 1f3ef3853eef1e61db9313825afeebe5ad918adf60d27065813597e6d815ba04 Copy to Clipboard
SSDeep 384:0gmSlBDsoevWBTy6EjKVqbkHknpuTNZ9zURB2xC:0roDwWBTqGwU9TNZYBP Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1029\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 79.32 KB
MD5 78998f90b40f12641a8a191252618951 Copy to Clipboard
SHA1 bea57c89d4527236d1d79aa7fd20afd3f6c0d14c Copy to Clipboard
SHA256 63778b2d4f78c2aed42bf7b1de87f957b56ad12284181427eaaeeef69fbf7f46 Copy to Clipboard
SSDeep 1536:6GFPtp5Aw3/aP9HtE5MhsMAwHFowCPl6EhOeJsP4O/B8JHIxdvN5Q:6GJtn13/aP9HeMz4wC9phdsP4gB6HInI Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1031\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.57 KB
MD5 f69b8630b85a9cbe487d746e8bef1b77 Copy to Clipboard
SHA1 6772501b66a6934ebe5822dc77762936174a9db5 Copy to Clipboard
SHA256 25c92e61324ec4991dbd7330ee5ce482e2ca5af9707f2bdfef607a115e0220b2 Copy to Clipboard
SSDeep 96:Vmqw7z60LLMdtAquN+n8NOubNEIgCgQRc2U6q0Iv:SFLLCuNVNhxp3gT2U6U Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1031\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 80.66 KB
MD5 2fee1f8e8c162e47c68447c11062fd8d Copy to Clipboard
SHA1 e1c94a0e23c24e25e54f39e51792fe2b0e368257 Copy to Clipboard
SHA256 2360766410c0461af00899642cc1c5d70b914da1747bf9c087f5cec2dc0e1d0f Copy to Clipboard
SSDeep 1536:oHFaWFL0tWgNQe50AtCb+TvyCWn7MAFA5tB7IguTkuEJJeHI0fZAHkhIguzMrC:WrP6yAtCbwv3+oAF5guTklDeHBZ+GIgw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1032\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 84.51 KB
MD5 979cd67c1a0e433f8b92cf17e1f5c2ad Copy to Clipboard
SHA1 d8a23c15e4671714510839471e5a54bc1a4eebb4 Copy to Clipboard
SHA256 8c6e24730a8ad387705c6f79cda2546191af4bcff0b600cbb5a988a4f7fb01ac Copy to Clipboard
SSDeep 1536:6oSQ9zb9fS4Gl/GH7JhMzhbcbaYIomMPUbJUZSOu2ATFZdRtVREAtvPMH:KQFb9fSjl+H7bMF/Ho/ApOuPVnq Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1033\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.35 KB
MD5 fb19d26c259957e0ed858fae85bc8f32 Copy to Clipboard
SHA1 a0cdfb46bfb88d95aab3d7d37ac38c50508a9a9b Copy to Clipboard
SHA256 d263887f32b65de60921fb5b0d7c5b8fac256636f47e20e650e4f0537eef0a45 Copy to Clipboard
SSDeep 96:uM4dz9+xGo/o9sgviaTZwVSy5/k0apXMC6GW2HpfWXW:uM49U/o2i1TZGSj0apXGkHpfWXW Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1033\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 75.68 KB
MD5 da5674232ae4b4d7a9b2c082cf83620a Copy to Clipboard
SHA1 042eb13f9058b98d4ac266ffce042a5dcf9efa91 Copy to Clipboard
SHA256 b1e77b18ba660edfc18e03d887b4640af0baae93c473e1a7853436eaf1d0eab1 Copy to Clipboard
SSDeep 1536:/7D5l6sq/CJvUC42lv/aYIa9DX4LhiDhZJ6pPhPv+oC9uh:xffv5jrX4EDd6pBvk9m Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1035\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.85 KB
MD5 24776dc65f2ef307fec779fa476c3a54 Copy to Clipboard
SHA1 a9d5049d9e2c160db32eddf92240a62480ebdc82 Copy to Clipboard
SHA256 ec02d5ad7357273ada71b0f554721cbc376b382af0805c5401fb104b85df5b36 Copy to Clipboard
SSDeep 96:Q3Xv5Bpe5fnspKmaKH5eaHQYZz22Z8VKW3oZiGB623f:QvLpmfsbawHQYR22uVKWBGB62P Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1035\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 75.46 KB
MD5 ec04f68bece58c437d388a1801529240 Copy to Clipboard
SHA1 1ce48dcf762e86c2fb0d705bf2abd2ee2b6c27ef Copy to Clipboard
SHA256 fd5041af2459bd4881b460f1149036be56e02df2707744f6cd2973487b29a388 Copy to Clipboard
SSDeep 1536:21l1Gak/tyBCHoy8WIlvE/yRccWD/OpCAOjxHEy0ne3JJAT:13/tH8WI5fecWDOQ8DebAT Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1036\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.68 KB
MD5 15ba5b9c00374a7b24075bd4fcae3e3c Copy to Clipboard
SHA1 d655b31fccc70caf00a860ba61dc72c08da89578 Copy to Clipboard
SHA256 42185c31c8fe0efa2e446c38a4d2579993cfab5a08c34efa333c018e6c8626ec Copy to Clipboard
SSDeep 96:aI7SPrcxngR30DqZimmrd0gavdqJWmAyjjprlD:ad4+iDqw16hmvrZ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1036\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 81.27 KB
MD5 8bc0b2afbd76a07fd44c6f2c2c0bce3d Copy to Clipboard
SHA1 ba9aee8c562598feceaf789f9be545c1bde5358e Copy to Clipboard
SHA256 216f903a67bc1f2614954fe220a02378fc1f73611f44344de9514c1cd3d24b58 Copy to Clipboard
SSDeep 1536:E08PcxH7z218xxUY3DmuoT+ihZ8EU0hmUMLx/zx+Vt7PPQUi8xB+d39NT3jRw:Fsc977UCe+i78EUwM1L4V93beNT3je Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1032\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.89 KB
MD5 f75790397965864a5dfbba0722816a1a Copy to Clipboard
SHA1 2f95d914c520d8d453594e002f7f6e42acfac296 Copy to Clipboard
SHA256 5e079cac34ffe9e3bf344a2464ae649efd4bd4f2e47724b0590646d2d745e06d Copy to Clipboard
SSDeep 192:OyhjUwredOfdXxzAwbieI4fsbytPGUhPrDO7TO+Oyeye:dlUwrked97pfRPTPrK7T5Je Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1037\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 70.63 KB
MD5 eae906b8eb9d0424e6979dd9d71815f2 Copy to Clipboard
SHA1 5f7b0907bdac4d3e1530b5279a39c11c63535294 Copy to Clipboard
SHA256 a9564268c79039535b6dc696e9de9305c4f860bef64b5598ac55dce415be906f Copy to Clipboard
SSDeep 1536:5Njv8j6FkrN9nNas8v2mESRv5OHa+VuemgDR5LjDVlRWHswASt2B2oA3q:5NjvdQ9nDmT5Z+Ye/7epJtSRQq Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1038\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.38 KB
MD5 a56b998792cd0f1e8336931483781a37 Copy to Clipboard
SHA1 1e54537f45bcdafe7a69402b2a48dd5a81da9e69 Copy to Clipboard
SHA256 12485093dd9bc58625ac8b464a203bea3307d130332844903ee48f3f4cb69cf3 Copy to Clipboard
SSDeep 96:IVV5BD7WtW/fWzY9LjzsewtDI7czHNGFY2bQEj:q1iYlj34N7yY+ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate5.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 3b0f610bef40240ced3d3d7c397b0972 Copy to Clipboard
SHA1 ce31286bef48cffc7e0ef2dd894d3df6e647f3f4 Copy to Clipboard
SHA256 d138851d02e4fa801855db19dfae67162a0c17459d8caefd10791d94db0f4bdb Copy to Clipboard
SSDeep 24:68KjWKV6dmFRyeNjn9Sy7hgd94m5Xml4i7D5+VjRlKx4V:/0VLTNjn9Swhgd94mG4ip+V3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate7.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 7435c0797387236fdb827d7043d84a99 Copy to Clipboard
SHA1 54b93288cee6f5d32a53d37b0113277375859d68 Copy to Clipboard
SHA256 9537cb3950041d6962cc940325a27eb4e918d6c6308626750b86bf7836200cd8 Copy to Clipboard
SSDeep 24:SoT7ZZT8IqVSZJx2fEX7cGDZZdGneXONJVisxlVjRlKx4V:Sg7oSZJxcEX7F1IPTXV3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate8.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 b3de5fc97413f5539c97c62e806fec81 Copy to Clipboard
SHA1 96f7415848d081e978fa80d1c7cbc2d76ad87e96 Copy to Clipboard
SHA256 38c5dfdd21cf5e37d10ae77f96bfe859b0747c434f626dd23ab4999394c16390 Copy to Clipboard
SSDeep 24:tlsmoRell83Vd06g3bERei8xbTJ74udcq4Ij633V8MnjVjRlKx4V:timZll83VC6gLECl7SB33CMjV3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Save.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.35 KB
MD5 f2d64fdb089492adfe36c112a97a3210 Copy to Clipboard
SHA1 f3e451ce7372cd3d3b549ca322a96a14a21195c3 Copy to Clipboard
SHA256 085bf00449bb1543f2a1e3ee239d1fedb06bc2a6968db993085747597da2738b Copy to Clipboard
SSDeep 24:L3PcxhaICVwt42QgmCrvgTuzmAe6ibuCSLujkkdu9zsPxc2yVjRlKx4n:LMaL0xxvgTuiX6zCjj58DjV3co Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate4.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 987d2abded381555c630ed1f33ca7b82 Copy to Clipboard
SHA1 ea59ddad8c9904cdc1ceba7c8b179a15e7cb7c04 Copy to Clipboard
SHA256 fc0872b7748eaf6f83beff14d75ba01a046a2ad42d383c0a050b6943c6b27125 Copy to Clipboard
SSDeep 24:w8GbmXGN3Hsri3M7fWJfphlmzGYG4vvMRFVjRlKx4V:w5S03IiJf5/YGN/V3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Setup.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 36.08 KB
MD5 b7f200092a3a86e7fd42650de2ac5915 Copy to Clipboard
SHA1 ae52f11630319519e2f457e142cc2164ee8c42c2 Copy to Clipboard
SHA256 677fddbf95d26ddff58facb0664cfbdf297830cfc68c533f0ea1022189e6de42 Copy to Clipboard
SSDeep 768:5TQ6O0agrzqKReOIK2E/WG0E7kIdp2faHAOjQN8Zm4y4+Qxhnvj9hSeu:u6O1a9eW2eV0EdpJvjy8Zm4CQ7vj9hI Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\stop.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.13 KB
MD5 444c8802653ba0cd6e321cac1dd7a1f2 Copy to Clipboard
SHA1 e011f957fdacb48d5feecdbbd0222d20f90cca5e Copy to Clipboard
SHA256 d6dddc725b2667669b9323ee39141932e8743cb69b5a1f9f0a374a7062132755 Copy to Clipboard
SSDeep 192:qMMeLwlia56xm5Iwe3cy1YJachPhbxHYq9pwJmjs+XpKRGHNoFBEKbvGlE31n:RRLwIa5ULELPrYq9pwAw0NoFBEK6lyN Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\SysReqMet.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.36 KB
MD5 85b1cf9e39604e51e858f6bc63146380 Copy to Clipboard
SHA1 9c2448591673580f2ae2439b8540bc994ed0535e Copy to Clipboard
SHA256 5acf2dde6a779d06176b5c6bdc1e985292b8446073003de210f082547ae78824 Copy to Clipboard
SSDeep 24:Ox0XCXukkNGma2Kb/V1tJXtOqrdzmcBk4LI03vgsp9QkVjDgDlGi3gUyYVjRlKxS:W0XCekwG/bVBXtOcsS93osTQkVjti34e Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Print.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.35 KB
MD5 d5204c26af8eaacee0416ad778cdfa59 Copy to Clipboard
SHA1 07e630984fd25247e77dd77de2d50dd7acb63f77 Copy to Clipboard
SHA256 f25066b222c3fbb37c8f07d44d175f3ffad4158d22df7bd89189a2b486f2a803 Copy to Clipboard
SSDeep 24:0iJJUN0LkG4+R6Sm+uCl+gEmDs/YoC6zI7aeBOIw5PPmnNp+qHOVjRlKx4R:0iJJS0LE+R5n7IgEmD0YHM2hu5XOpTO7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\warn.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.13 KB
MD5 88057792e1e0616eb268879323b6c6f1 Copy to Clipboard
SHA1 901471605817d5aa3473a6f2989fc10cd8265e43 Copy to Clipboard
SHA256 e6f64cfc5796059dae1788e6e32f870ff2caf9cf31c5d97c9a5183f649bdbff9 Copy to Clipboard
SSDeep 192:yxWx2EmUT3eb4Olme7jJahE6z+M/2cVmMKmxHFHfyQPdgl5B3fVKi7jLvCj:1wEtT3/OlmeJae6aM/2cl5FHfzdIH7aj Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\Rotate6.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.10 KB
MD5 7feff448be305b4fd837fbfa4f94c89f Copy to Clipboard
SHA1 6a1ea7e84090fa6d1bbd96fa28022bb91c7646aa Copy to Clipboard
SHA256 561de70d3da2aa1180239f8abf8620ce644303ca7d1c334a5445825e9caf026b Copy to Clipboard
SSDeep 24:acE/9qGqYVPMQM4jWuecUPyyTvB7TsFF2+9VjRlKx4V:CcGH64jRUPyY7gFL9V3cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1037\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.93 KB
MD5 05a5540c56d33298bcfcb32be96ad773 Copy to Clipboard
SHA1 c4b9e7f74c6ab032ced69a21d628308792d3925f Copy to Clipboard
SHA256 e6c6150ca803203cf43b4a22c477d482917d3ed9caa319040998ffa00127ce57 Copy to Clipboard
SSDeep 192:h7obhUNG0bJGnfJFdmCuwpyXSHdXUJ31xq:h7ouGvhTuQdS1xq Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1040\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.79 KB
MD5 975b293fccfc77ac6beb135e7f9550df Copy to Clipboard
SHA1 7050bcd9f44eac72fcc88a8b098b241b51957824 Copy to Clipboard
SHA256 1776cf554cd17ded8bb8ac5469ba224e58955595a5746705ec0d26d8c3937567 Copy to Clipboard
SSDeep 96:nELuCyyvCJS+X0bu/ZyNUDoIpJhSKPXDXfrk6bYJFzUctE:QutLJcbu/8eoyzPD4FUyE Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1040\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 78.43 KB
MD5 cb6a79f82a6481fdf311cc32ec5833d9 Copy to Clipboard
SHA1 b04022162e1f87386d5e3a9ff373f369237154cb Copy to Clipboard
SHA256 5e2c0ed3dfb99f8871305e51d5c9b123e46648421746b800f205dfcb1aaa87f2 Copy to Clipboard
SSDeep 1536:Wc4YxpHoQhBwyN+RElu1+2J7nR2+0p0JuaOpL/NqAlmctyXLDRwQpDrR2:9VLoQh+zEILJNV0pLYYmP/WmDrM Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1041\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.11 KB
MD5 64ca55bba618b112ff55198cd3ba4f95 Copy to Clipboard
SHA1 550644de47c5cdaf7a6886adefd276b4a6aa455e Copy to Clipboard
SHA256 53724759ff00cceddfe9c7e648601644b88c7cc6dff60929136cebde5921d95a Copy to Clipboard
SSDeep 192:muzfLuXE1y70TbStXaTjceuyEHACvdmZLIj+v88LUG8SQ80ZaDC0444DEykPx:7TLlRmtXYMHAYdILpv8sUGb08eFKPx Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1038\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 84.66 KB
MD5 aa6b01f89e827d42c475d4b53ad5f6c4 Copy to Clipboard
SHA1 8ac046fed039c0f7a778dfb73b2aae13c2474533 Copy to Clipboard
SHA256 64a9182d23e13c5b6121fe7f99789caaf88ca2a43bb1682de02f9dab872bf10a Copy to Clipboard
SSDeep 1536:Z8hVBGC0Kf/+3/pmWtniSn092W4K7nRGkYg7I97+Knzx1P1LHUQ+R:6htQplMn2W4KrgkYuujzx1t+R Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1043\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.69 KB
MD5 b95e9fa355c5883f90b591a176831a96 Copy to Clipboard
SHA1 8cf8ebbe85e774713fb05fd4a4a1c2bd6593f544 Copy to Clipboard
SHA256 8c6e4f42140b29fe1f4b707ff8ada0390a28b7e59291aaed7cd2fef5be179502 Copy to Clipboard
SSDeep 96:s6qTcRYyVCIT/Nbie8oPYmRuLQhPNDZ3jgLy:sfTcDVCwNie8o7ULyDsLy Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1043\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 78.02 KB
MD5 f6d23dc78586ed8eca63d9c6927b328f Copy to Clipboard
SHA1 62932dbdb7648378b8cd9d30b7cb22c6acbefd0d Copy to Clipboard
SHA256 bc4cff4a5fb6be306e65ea6b254257d83ecf3dd12d156c8498a303cfdbc29614 Copy to Clipboard
SSDeep 1536:K6AiMo/4argQe9rEF5Kq3Csx249nhu+ob5PciKUAVncd/T+L8/QH1S:XPRL6RG5KYCsLnw+QPUUAnop/QVS Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1042\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 63.96 KB
MD5 722c2488c36f282d82835a025ac32e7d Copy to Clipboard
SHA1 2a95d29ce9af7d177ffdbf844b7e325e0655ad23 Copy to Clipboard
SHA256 f193d354c33f4d8cd2c33a5e5182ce854194e3a5d3b3b1b09ce8cdd030388daf Copy to Clipboard
SSDeep 1536:1SPVJf/u26dglaU8Ska0omOpvyklIgRjMJzNmyGjT3Hxn:1YlsAaU8Skfomqy6NRjMJ4yun Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1044\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.21 KB
MD5 f405e98781f65db54f48f71b04ea15ef Copy to Clipboard
SHA1 21bbf28e0acfd8ac45c17af92b8d0aa4b6ffc5da Copy to Clipboard
SHA256 a1182da7cdcfa4081ed9aa618556bec5b94caee0da657660817f5313d0a40a14 Copy to Clipboard
SSDeep 48:fv9La0gqlDnwKkqd8BHQ0ejdcme+ZgBu5M+vU92VVWDDv98pFysrHpWCb/ni:n9eqFnwKkNVpmeqdDMEWm2Oa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1044\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 77.69 KB
MD5 fe068723fe132f27d5b18a6f29539066 Copy to Clipboard
SHA1 873061c3a81d88562ddd53d8b9f5cf9077e8c96a Copy to Clipboard
SHA256 5a32f83e90fa21c76ae7ea0374da4e45afc1f9c2dbe563cbe4a3fa8cd2022006 Copy to Clipboard
SSDeep 1536:+ZkMqbQ/HHVhqmXgMQh4o0liylA0WYrnX+cRdMKxsFcP6BoWd:OkMYQ7NST0R5T+c3a46Bow Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1045\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.18 KB
MD5 f8d87c3ddc092ee19333fcb75cf4bb52 Copy to Clipboard
SHA1 b4b48f31bc49980a784debcf8c8a9dbb4f29b246 Copy to Clipboard
SHA256 fa054ac4200b818fb93fc26f797ee53498073a34ee3f32bc31239a383c108818 Copy to Clipboard
SSDeep 96:opb46oT549UvdJJGkMxqNC8/IKMAlctNMRPfCWK3H:Sb4lswdJskYqNA6EqRfo Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1042\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.61 KB
MD5 ab223c857520e33332d427f57ebee186 Copy to Clipboard
SHA1 d63c4be0d720b2fadf7aae2cb49dd6a5de3d9638 Copy to Clipboard
SHA256 cd1f0b4099f880042de383ae040ed85877b89aa9b4c7eb19fa727c375d9cbb0d Copy to Clipboard
SSDeep 384:RaOcUUmgI1KLwJg35wBifeKnV65dND+5ZjWhv3:RvULI14eimvuiv3 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1041\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 66.88 KB
MD5 053ba8e2b2b11aba5d313be81a7cd470 Copy to Clipboard
SHA1 dec8930f11d1f971cb0cf1b4ddc7c5c2c010be00 Copy to Clipboard
SHA256 a0cb4d5d123a85efb0afe3ce50c7e11c4d4c4e9d2c359e5982397d68b43b9913 Copy to Clipboard
SSDeep 1536:q76lj2CQy1sPjUFe7tQ/PMFBv+fV2nPcv5c9Brl7xdSu5:gKsAG7M+Bm9mB93735 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1046\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.83 KB
MD5 7d222cbd526a279d7200bce95f0f2ccf Copy to Clipboard
SHA1 b0b650b0f1af0f50910fe26af9228db60facd21e Copy to Clipboard
SHA256 15d8abab720fa4d9cf0e4c12b980841779d6c061343caf0435a96f00136927e3 Copy to Clipboard
SSDeep 96:dGhALILYXIQIGMpd4WOppTXhrTCg4WHISMe9:pLEwIQWpd4DTX9CiJMe9 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1046\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 79.10 KB
MD5 838d887f64c5390879baf0d9004fe368 Copy to Clipboard
SHA1 0119ab69267115c5bb119371a1ad8cc560a779b2 Copy to Clipboard
SHA256 d7c34b3e0f214ff0e9435fb8168e60dd72e689eecbcef546412d299a608bea2b Copy to Clipboard
SSDeep 1536:WdetdxStEOtmF7SHoJ8UoED6z4aaUjQ9OgI/lgxszvOoBG:keHxSt5mF7hDNaj6i9gxUvOB Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1053\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.00 KB
MD5 21bc399d2ea987361fccc11671f0746d Copy to Clipboard
SHA1 b5d08ccc016dfbbe27e27f1d2253de9dd8b04e7c Copy to Clipboard
SHA256 3a8f6a81d14d43469da3199914b63df2c8fce5164fa6db5892f7f58c6ce95585 Copy to Clipboard
SSDeep 96:6Nr2AtYjkFYjU94VY1FGLoneZLkgyq/AottTvC:6ptYub9v1wlMq/Ao/TvC Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1045\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 80.69 KB
MD5 6c6bdf11ceeda19c7b20eb324354bd8e Copy to Clipboard
SHA1 3a1eabeaedff31c5f0f47bd0ac91ed5d097f3dd0 Copy to Clipboard
SHA256 924f148ac6f0004f93291350d23e4dfc0521a13feaf8558b971f68edcd374792 Copy to Clipboard
SSDeep 1536:4b+13ttxIUNd1o/CYdCpzGThELdJWsEbvfy2crp2+MIxOcKok:v3ttmEd1oasNELdJ4fyw+MIsBok Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1053\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 76.12 KB
MD5 81808494e46cfe38bf7b087e77ae5f15 Copy to Clipboard
SHA1 28efac0a59c09193df87fdcc4e6439bb763f95fc Copy to Clipboard
SHA256 ebd9147f72ed246646aa4fae5c3703180b03ab74dc8703e6ff483c16e92034aa Copy to Clipboard
SSDeep 1536:3lhX3LAP3GiGoQS/ti5LFoHxwee0LtWp/lpxiGTVAmFHT4WdxKgTe28acHuI:37XsP3LR/tWFoHmP0+lvDTVdHT4WdxLk Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1055\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.00 KB
MD5 dab2b7f08e15f474419a539d3233fe7f Copy to Clipboard
SHA1 f46aec137bdcc1032df852e274547d953aae02b8 Copy to Clipboard
SHA256 5a45f053b3eb8a0341b4925095fd2c9910110460daaf467a2f9b937916841494 Copy to Clipboard
SSDeep 96:PdQK14jH+meShxn4tDSBFr6mAWcAsxmlLpg6Wtxpz5f:PueJ4x24Frpc1mMJpz5f Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\2052\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.93 KB
MD5 4f404ccc7aa28a0ad2ac49d2d5f1a188 Copy to Clipboard
SHA1 1b97e0bc2022bc3a21f2cc00c6873f14f040ddad Copy to Clipboard
SHA256 72e0cdc736f2335f0f83f0a3afde6e1d8de5c91effc90336076926911b883650 Copy to Clipboard
SSDeep 96:eE6NoExKaIO7+KRyWeDm/jPXF2T50QN7IAD/AavYxkgCPqjuaqZOMb/oW/gol/:wNoEEaugeqLPXFI5qADDvYYC6vt0W/FR Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\2052\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 59.51 KB
MD5 12529506fd7534297ecb555457c3f8b7 Copy to Clipboard
SHA1 5c5b9629fbb79de554ace90228622805674a7d79 Copy to Clipboard
SHA256 9d07c729f3794a0fd3ff861293ee8be2f190484cb6d0c7215c7de1be00c41585 Copy to Clipboard
SSDeep 1536:1MrqdOGqElJZX1gM76ATPziIrrBXHGvw4Zzv+uXLPCm:1MrGD7lDGfATPLrrEoQv+cX Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.36 KB
MD5 a095ce31a4142bcffc3afcb428733993 Copy to Clipboard
SHA1 f989602311786fab2f6fa78164e47278ee1b144d Copy to Clipboard
SHA256 4f15ebfe09cc0beff942ff5fbd8e1a4e5d08ec9a12d26e5b8e068512015ac16b Copy to Clipboard
SSDeep 24:SH5VczJ10Dm5K/sTKQ+S2BpZtFQ5W0aDq1G7TEdD8vrkg2d+erN8xWF1GXKhvu4z:SHvcN1T5K/sTKfvTFQLu6G7gdgvID+e7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1055\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 75.27 KB
MD5 357fe2068620338426fbb3261ed57d27 Copy to Clipboard
SHA1 b5706a2a188f27be922e3f9a1e29e23acae750dd Copy to Clipboard
SHA256 8710a61d9212d9620d7602386f2465870465dee67061a038603985742e786b6d Copy to Clipboard
SSDeep 1536:XkrajwprLhTmHNP0w+SUWlRCObQNyau0vBNAOhai1KQpTw+YuvnM:UxxoP0w+SUGfQ/vBNL0WTWF Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\2070\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.14 KB
MD5 1d755111e00defd03cb3732f45016db9 Copy to Clipboard
SHA1 ec33428fd336f43e66105df71845ca89273c6e9b Copy to Clipboard
SHA256 5615ee89297b06f0d3ee6a132cdac31c69a6b358228ffd651065121166bfd05e Copy to Clipboard
SSDeep 96:hjxoVvr+N4KUaM2wu0Lv5u3XISORRDOJagzz8JrMEyPKA:hjDN7wu0LvOBOEagzUQEyh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\3076\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.39 KB
MD5 6d7f03b9aa36e8da644bb2fc02958622 Copy to Clipboard
SHA1 3edce21ac40bb4a6fe9c8a92018f2f73038191c5 Copy to Clipboard
SHA256 a703d90145e329676458a4eaaa0536a0c67dfbce93d157f4532a53550130f3d2 Copy to Clipboard
SSDeep 192:ujkl/H1AM/6YpiNUFQGgJW/3vxzRuBqjfvt1N3HOYR:u3MbOzJW/3pzRYQl1N3HO+ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\2070\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 78.62 KB
MD5 09e5d6280ac2278f1bf852711a4dd7dd Copy to Clipboard
SHA1 5d7c5cfa3baf1230fd0ca92475cc352b94a62ef7 Copy to Clipboard
SHA256 b5c387dae74c28459f810642a2af5cf15e109513ce2fae03f337295028f012da Copy to Clipboard
SSDeep 1536:TksklxN9ACiiq2LvU/wkjeHHJ6dpbquYtce02805H5efCYn:vkVaC/vowjp6dMj0254n Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1049\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 79.82 KB
MD5 e6de00eb1796a6d4ac7cf3ebd04b21cc Copy to Clipboard
SHA1 78eebcdfd0db06ca53893df1a115c6e7f5b31eb8 Copy to Clipboard
SHA256 f8fec997a2c14b5078d0492bf762b51751d2288c472bcbbdebabb31e6e79031d Copy to Clipboard
SSDeep 1536:joqOXWq7UUdyWb+ZGI+6nnY54xwOG9R0imiqC/4P9SFUvHq0tlA3DxmW9mWy:joqOXWqwWiZGPiY5YwN9Rb4LNIPBy Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\1049\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 53.41 KB
MD5 75d115b2d8b9fe022cc4194b7c1de822 Copy to Clipboard
SHA1 acac945b3a38d4f32a003dc9df6964db69c27be0 Copy to Clipboard
SHA256 63edfb998c5b223c57b9056c41ad4c05e0fe6b72b8104417e19f2bb8f28e1b56 Copy to Clipboard
SSDeep 1536:hS9BBq7Gmh4I/FOo6FevX8ZhAX7hxkhXB9m:cK7M+ObevXumX7hGhXBk Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\3082\eula.rtf.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.22 KB
MD5 2632b99db9de03fc38cd1ea316c01801 Copy to Clipboard
SHA1 74fd7b93791cd81feb1c42117cd2e4417cebc840 Copy to Clipboard
SHA256 032772691845fe46698ae53a63b1eeaa3179ceaf4c46afda6b4adc4020074e74 Copy to Clipboard
SSDeep 48:PVbIzvc4bNcKY/9ccG+UYVTKdiuyDUgW05y9ckoq0gTlV8ERDj90O5MWJ+zUi6:Pp8Zc5KcbtVTluySmy9z30S8ERDeOBB Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\3082\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 78.37 KB
MD5 8887c247dc2a3ef8d31d630588781155 Copy to Clipboard
SHA1 6df5b6c8d951fd5e97ecb0b895ed9456e63a599b Copy to Clipboard
SHA256 6414db42875e3071fd6a4ed9d94037aa607b15351163f53d67be8c5ecc0f4147 Copy to Clipboard
SSDeep 1536:chPzcb4a99ok6sLTfiUTUx9LKySlCVTILxAEiW2xaVjCjcqOf24QUCoQ2n:chQMk9osfiUTGLK3UQxAErqaV/s4Bnn Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\3076\LocalizedData.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 59.65 KB
MD5 45754e569e423a78fc88ebf5e7ade4d7 Copy to Clipboard
SHA1 900cb4dc56cbaf6ac2d4cd52929419912f963568 Copy to Clipboard
SHA256 9320fc539bab355bd904a2cbe370b21a6c0b9f57866644c02048e0b2a9eaa9e0 Copy to Clipboard
SSDeep 1536:buk7L6Q6yXe0Ou7m4QymxKnUJOARHQCtFUO5pzMRpgy:b9L6QtXDO7Dy3nUJXRwQ5gh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\DHtmlHeader.html.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.99 KB
MD5 ae309ad1be3cb6f7192723e25c03a42d Copy to Clipboard
SHA1 ed91878c948d4d86e63e6e91fa1c243c4014a5ef Copy to Clipboard
SHA256 586915be790b88be4c3e7266cbec7b0f0fd060fab33286f5583c5fc1f5d11001 Copy to Clipboard
SSDeep 192:n2ktaeWMY/L8lAlM4qr4z8y8H2DByjKvdMvG+p/EDsHGXGWRkztMcP+h0arquX9+:2tm4gRWDom9+4sfk0Mqut8f1kq/S5h0 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Extended\UiInfo.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 38.37 KB
MD5 8052fe113b43554c08f2f0a895f65df3 Copy to Clipboard
SHA1 79cb4c8b09202a221fb187a55847cc09c630a5d9 Copy to Clipboard
SHA256 e89b39f4d5a0835c6d012ffda4c3afdae7143d6703fe56d87dfe8205877261aa Copy to Clipboard
SSDeep 768:X4aAV0R8in0dEZRju0OemhjLjFHJiWxx8XuzLGGg2J+tarx7Ng:H20Rp0d+Oem9jFpic8X+Gz2Jdrx7Ng Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Client\UiInfo.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 38.37 KB
MD5 738f6f5996949e8d396f9627fe980f92 Copy to Clipboard
SHA1 37b61fdb1c05cb96337fd135c032720ae242d03c Copy to Clipboard
SHA256 551e900de23e2aa7c4eb055057e018959b3f87e59431023ed18e838c7515d9d3 Copy to Clipboard
SSDeep 768:TcPLgBvEgtqh+mxgdOTKMkwwOuKiNVHZhI8H3w1osf2:w0BvEtxxCOTv7hMNV5hI8XG2 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\header.bmp.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.77 KB
MD5 ff0817627514c0d8bb68536a6e37def7 Copy to Clipboard
SHA1 a14b7d771c7c9c750b9303cc847d80d4e9d9687a Copy to Clipboard
SHA256 770555c5b16e0905e9fa6bc89af1918447903b4975a2cb394fca90adeac7231f Copy to Clipboard
SSDeep 96:y99ilH14BWY+9fNeTFLDvi4jrh3nTYgNLDI60U3RwXfj:PHYWxfNe5vi4jr91PIYRwr Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\SetupUi.xsd.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 29.65 KB
MD5 2a48621590d97db4dc23b928384f0f0a Copy to Clipboard
SHA1 db4e7f13aafe75dd47e190cdeb78db42658a5853 Copy to Clipboard
SHA256 621f7e726b82f51c8c56e9c24f85781572045cc6580d8615b4d5694beba2ad73 Copy to Clipboard
SSDeep 768:Mv1764c0Ol0XDZivMVe4ewcbs2IdYhTlyg/rmN2Sv+Gz:Mv17dtRQUVoHbs2IdY/ygDmN2w Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Extended\Parameterinfo.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 91.38 KB
MD5 dfe14936e20a90408771691f88d8bdc9 Copy to Clipboard
SHA1 1c33387102444c6a264aca6a636bb4a6c74208ba Copy to Clipboard
SHA256 91ccfcc3a418a1493898f53c54404534f02593128ada1cc5b7afd129b7cf1005 Copy to Clipboard
SSDeep 1536:GyOR5WVrPSIgydig2LtaiWJP0sqTvKKbcGaZ2WfxDe+vH7N4twl8ElH98r:la5WVOIgA6taRPQzcGaZ2gR7N2Y8ElWr Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\SplashScreen.bmp.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 40.36 KB
MD5 186fd067a1131c19b52331dad5c81dd5 Copy to Clipboard
SHA1 e3b0dfd1275f0101efe0f969caf23e3785b69738 Copy to Clipboard
SHA256 7da22389c7ada6fd7464de3ff7042352106ca6912d209278eddbd0db0f3de0fd Copy to Clipboard
SSDeep 768:JdXNOEo+kka5eoiaA17YaUAIXnQUzEox38VVLivRb6DRTSq/Hb:JFLkka2ak7Mf3AMb6DRf7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Strings.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 13.99 KB
MD5 96818ab0e83a8fc1595a6aaeb8dc6157 Copy to Clipboard
SHA1 2667a02c75301ddaefe5184e16369a1073e0deba Copy to Clipboard
SHA256 70a79115018298f9b01a67a57f5ca39206d5c729c540a99c28adc23e54cd64b0 Copy to Clipboard
SSDeep 384:AGzN8asU1Cw90dmr2VxDUKfQM06tYO6xFQe1iskKb9:HzN8LTS0dmr2fU6q7FgsJb9 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\UiInfo.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 38.23 KB
MD5 1207b874aefbc98bd2113db5088c879b Copy to Clipboard
SHA1 29f33b4809b584184d17f92df61386d54d893695 Copy to Clipboard
SHA256 0b42695899e58987601c083a2bc45bcb227288f6480cb4001c350939369e28a6 Copy to Clipboard
SSDeep 768:UKgJBGlu6y19RPZYUXYFscsf5WOY74jcG6eVI/daM7wjRkY4ugk:/+BB6yllIFsDY0jL62I/dREdkYt Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\netfx_Core_x86.msi.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.11 MB
MD5 ea57a1b039c177b4eb42f71c1fcc2e4e Copy to Clipboard
SHA1 b18b7c348630ed38727d78849a5f5c051a224a4c Copy to Clipboard
SHA256 3338196f8344459b79166e4fc54243829c8cd458e2133ec2a0b15cbf21484692 Copy to Clipboard
SSDeep 24576:2+K5BZfCNxuMJQWsm6Hwn5xaCUwrltsxzdKpvWM8PZfG0CwFJttkscBHrjUzXySN:2DC7uM78HUWCfRtGxMsdRrtxk0bySiI Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\watermark.bmp.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 101.87 KB
MD5 e7ac328b82a764763ace85693d3d2237 Copy to Clipboard
SHA1 d79597fd2451d76204913c59417cd659d385d121 Copy to Clipboard
SHA256 7dbfef738e183b912f9f4e08e5ce9debfe51a001d091b83358b8081a06ebc0fb Copy to Clipboard
SSDeep 3072:PSf6fpf11XRJslPtL3F0S7lBT7OZpOptx2/fAoQ6:6fkx11XOPtL1b7v7TpvaQ6 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\ParameterInfo.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 265.91 KB
MD5 acba3645231fe3632f93c166c62b19ab Copy to Clipboard
SHA1 5fedc88d72fce6d77062564912d8955942045dc4 Copy to Clipboard
SHA256 e1c76f3371a8312cd5a4dcbc7db633c495d0b33e049a131c4a43281e2b9e600b Copy to Clipboard
SSDeep 6144:3GHkmOMKCryohm1VeXhtkpjK2XJKmKVKHQwDhGOuwXm1QSZO0:pplkr81VeRyk2ZKm3D8ZwrSZF Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Client\Parameterinfo.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 197.32 KB
MD5 3c38a676b759e2f6291bd20e9d1aefb2 Copy to Clipboard
SHA1 ad7304a01f6ec911757f632b3c7ea10eb21329ca Copy to Clipboard
SHA256 1fc7202126be679a48f778e9fea8fdf2b6be5b497b91ffd1dc9e7e479b277d35 Copy to Clipboard
SSDeep 3072:/qJH9vVJ9fKIIZqjrw6DqlZl422TIs6W5DFo5gthCCTRkiRYawYpeSiPv:/azfIs/il4eWDFo5noRkimH/SAv Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\BOOTSECT.BAK.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.25 KB
MD5 3c6f36ae47598f44d49df0124ab5a2cf Copy to Clipboard
SHA1 ee93e771eabfd96f1a961a9d294bd7957cd96758 Copy to Clipboard
SHA256 6e32cf1d0c93a602abf139a855229057713f990cf7cbdc3124895e2cdefceb5a Copy to Clipboard
SSDeep 192:Y2U9cTg1kjTKN2JeoFVun6KZ1OaH+thCP6gCHFP1N6dF0eZiIez:TUiTgke2Jeoj+jt+nCP6rPP6zTUz Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 890 bytes
MD5 399b07583136291d4e80b8de0d914e89 Copy to Clipboard
SHA1 ab0f589347efc8af8336c4b1b45009e8bd0cbbc5 Copy to Clipboard
SHA256 cbf4c9986b5189a4e4efef8c5b9da3b075de2f73cefc465ff9a16b44b107ce0d Copy to Clipboard
SSDeep 24:6Ed1T89lfHNt9w4+G41jEpmWA8IyK5KMLP/MbO6J1:6E1kttoGHpm5NHKx Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\desktop.ini.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 410 bytes
MD5 e3a9fc4c17d8075a1d9212f98f592dcd Copy to Clipboard
SHA1 64be7fce3920bab66aff433a9df68b485857ab8d Copy to Clipboard
SHA256 5a8f1c7f973c952b27adb6f25dd5c34c819d193ed75a83368e4808115fa25701 Copy to Clipboard
SSDeep 6:KBxE7ylRg1rYV2Cyv2Z+KmsCYOpZ0Syym4JA6WC4qapQVf4xsY2F9p1KEIVApt8o:KzE7MRgviLCYU6SyyJTNa2+sYypJ1 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.62 KB
MD5 ba863a431733d01b47f5cc53f52daf1c Copy to Clipboard
SHA1 c2579fd4808fe71199345dcd826d63203fbf4e06 Copy to Clipboard
SHA256 7430ec3ea137fdbfb12b98a672d18ec840d75a6e3c8d840a9a9c49045cb0a29a Copy to Clipboard
SSDeep 24:Z+vZQKi2a2CdCtDiUj9ptYm8+5QH505QrJha5Gos6O9W96d2qg6Jb:Z+BQKin2iCtDJjtd8+5wjJY5Gl9W07 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.06 KB
MD5 deeb506e1bd3facc48888a324184b668 Copy to Clipboard
SHA1 df00db6597fd4a9892e414dc137e0c4b59ed689e Copy to Clipboard
SHA256 454c96982fc66e4332f2fa8926c1861ef8cd3c8b933c31896517be69d30cd193 Copy to Clipboard
SSDeep 384:qWVfak2dK+OTjWxy2AZWB7CWTvF+FSDp4nBUpYH3:qWVfa15OTWlMFSDp4nBUpG Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.62 KB
MD5 57c662c15c44d3f6a3ca3cdc6a6a5638 Copy to Clipboard
SHA1 49a189ab3289b308304655ffb44a46f57b90afcd Copy to Clipboard
SHA256 ac1b4e4ec0d19a06e718dc94adfc233296d28667fa49aa132458435c38069ed5 Copy to Clipboard
SSDeep 192:rWTrQnMYLQHR8CKlnzNbsAweeQdR8GuVjW:rEHBuCsnzNyNIruVa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.87 KB
MD5 68b76c2cdcf679726d72feca050d5314 Copy to Clipboard
SHA1 e1f8e5a4d62cef1ba90a66e7a118332f92b2112e Copy to Clipboard
SHA256 cc9e60b8df6968cbbfba19527d3fb90202cb4de8e4d42ec848dc3e2efeef8414 Copy to Clipboard
SSDeep 192:8W6IjpqS9ldVMuzAzzkH/Bvx2TgYQtcUZUoXuHghWVu60xs8h:1jpqS93v2ivkgYQouuHghiu6y Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.21 KB
MD5 a7bcc72baed0c60c0b4fecd8a34dc922 Copy to Clipboard
SHA1 d2c105213ce7919f395d06f39c483cd13a825470 Copy to Clipboard
SHA256 292e9b9435e63b4e2aeafc394d22926d0d5c9b1ceb4cea08487e5f0a1d8efa9a Copy to Clipboard
SSDeep 384:TCgxD2t8Y86a091TBTS5myu/If2l8WxYzh:u+fY86a091Td5lIfK+h Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Boot\BOOTSTAT.DAT.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 64.25 KB
MD5 e367dac8341da79a403d3f6358a96257 Copy to Clipboard
SHA1 9d987e31ec51e108375caf3398c8701f0015ef0a Copy to Clipboard
SHA256 a0533b6105ebf38cbcb53fc57642709468fba8c39953e6377da53cc9bc5f8724 Copy to Clipboard
SSDeep 768:7baMue+RwZm0+JltOP692LN1O4IF8KB+PUYRXZ7vT4KDariaGy9Y+k6Ypg/1uYkX:7aT063NcL3EF8VPUOZ34qauOP4g/MY9A Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.37 KB
MD5 2773215c2e253d143ffa6fa681a8b2f0 Copy to Clipboard
SHA1 c5cd361754d34e3528fbd0ecec5c7406b9491326 Copy to Clipboard
SHA256 99e6e2cff63a1f0f4024623711714d7d3e365f12c1f157bd97afd4989fb5bc50 Copy to Clipboard
SSDeep 96:9C118GuzfkKQ0Gn9y7OEjsPQFDJr/ilX1EYp0ntWAbP:qOzfprGA7ztF181E04gAb Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 103.25 KB
MD5 12d6866ef0f80c8652a122b96444ad1f Copy to Clipboard
SHA1 ec949c8f69dfd3f3de7e548c15e2d536f91cb4d3 Copy to Clipboard
SHA256 bf7d81c2f616c81fc683df608e9c685eb6dfd820fafeee51c1d6fa841d8faee1 Copy to Clipboard
SSDeep 3072:1n2SwtTCzdl4IHwiGfIrwJAPQAZJgc7OCn6B:d/db7EvCPjJfyC6B Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\Office16\OSPP.HTM.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 170.68 KB
MD5 6503ca5878969c4d0244308079c60696 Copy to Clipboard
SHA1 ad84386ceb08534dc22570cbf65d1a60c4269f9e Copy to Clipboard
SHA256 61c6195fd957633a6ecb0f2c7302c49d8df66195f32089bf51c30bacd0cd1c80 Copy to Clipboard
SSDeep 3072:Z43vqL/4lNB8MsVOPwQoin2fuOCX/+8F8ejRrAc9n+iMJhpvH3pFJbW31Jt3s1Rp:Zovc4N8MaSwwnO+tF8ejRrz9Chpv5uJo Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\Office16\OSPP.VBS.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 92.49 KB
MD5 d776e78c6de3c3e8488b57f56932ab86 Copy to Clipboard
SHA1 386370a90411a407d742b143d3e50678c8acb5f8 Copy to Clipboard
SHA256 090396b8007fa21d85c57ab7f5d8a3644f58eb06fa8c13ea920ae4340ae3a876 Copy to Clipboard
SSDeep 1536:1EQ4sxLGlXngRXDfhLpLsf0n4pSmiR73Popl6kkp9xI+7iTvpiCpXe:1hdHpLsf1SHPO4xXwhi3 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.15 KB
MD5 57238d0f2544d9551bc25b002bb55eb8 Copy to Clipboard
SHA1 f9191e762e4ec7d81dc504e99d4d821db8036382 Copy to Clipboard
SHA256 45b3bbaf5bb6110c2ceb23e34719927f7436a6c0203117e31d4a75a7ad15db26 Copy to Clipboard
SSDeep 384:1V1RW4G6R0ZZn9+yzw/OxtWXRD1CXJq7hleGIYj7iT6Jr3:1ROZhxcXB1CZ4DImcC Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\Office16\SLERROR.XML.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 35.73 KB
MD5 7567491efe1fd467189a9d5684a22de6 Copy to Clipboard
SHA1 67158d1107795a1fce9187f8186ad9831eb7dd9b Copy to Clipboard
SHA256 576aa76187cc0afab14d28b5195ffa5cf0434126ff1137ef55a0dc9777b96668 Copy to Clipboard
SSDeep 768:XOy8zH/7oUnwbmWGk/Ud1M4meqkRyNSNsCCpon6m6Ez7my9Moru:XWj7oUYemjkRyNSNsC6op6Eziyru Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Java\jre1.8.0_144\Welcome.html.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.17 KB
MD5 3346b87453bd92604179877cee36cb9d Copy to Clipboard
SHA1 47f2fa1866d548efede1371e955601d0f1c7d92b Copy to Clipboard
SHA256 1953406b190258e1e59d180a85fb3ddd327436b9189e55b1be336718685e2b5e Copy to Clipboard
SSDeep 24:HQFIdpyNoHNDkqFbtYrbRkbUki6uEEJvO+r5u+6Jf:HQ3MktkbUkij5NO+Nc Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\RGB9Rast_x86.msi.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 92.75 KB
MD5 b6d20c5c19850835e3b4b3b2ac42a6c4 Copy to Clipboard
SHA1 f7a08d597a0f2aa8e298d1909554d9b9c1440f4e Copy to Clipboard
SHA256 d5d8408c37705800abe8c6c7e9117121cde2f0dbab8c0f6bdc2e475bd6f0c392 Copy to Clipboard
SSDeep 1536:MCiBEaICx5ULWnPbch18ZpPhw1/r5Ho2MoqK+8xu2FDalqqqLE2tZNxLLSu5Nx0R:Hi6xCx5ULWPAh18ZNS1/9o2MoqKALqts Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\RGB9RAST_x64.msi.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 180.75 KB
MD5 8eaab91b367876beedcec394d1e52a54 Copy to Clipboard
SHA1 9358034a0c948f3641b9d8ba730d0f741d70b95d Copy to Clipboard
SHA256 ef2c4507739fd00b778b3f2e45fd9758df6dbc2228354840474e4090b3df5b2b Copy to Clipboard
SSDeep 3072:5LLupIZSFlwvwSTrBlTfsq3xsQariC27Dd0F4T4OsKllmbwjclGP2cO8nn4k/mfX:tiprPahJaGT7SqowlmZGPbO8nn3/kI0 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\Setup.exe.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 76.55 KB
MD5 19b95c0c2f2b16023721e29cd8406931 Copy to Clipboard
SHA1 664f17cadb39103022b9319b91c2d9b4552c880f Copy to Clipboard
SHA256 4078e34983d55171adf3fd7dffb318ae6a69dde830294021fc0c55c5aeb57595 Copy to Clipboard
SSDeep 1536:2q2McxhRk696E23VkRJEmy8HI+vcSPjDXsaXx7iYRXSOO1NdP5qd:2qgxhRpJJEmFHI+ln5VXSr15qd Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\SetupUi.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 288.57 KB
MD5 f18bf28f5499bca03f5f7db0d5048bbc Copy to Clipboard
SHA1 1111a148693cac189f7d581e5922155dec97cbda Copy to Clipboard
SHA256 acbebf5196b1952dc6b01cc836f41012995c0673228633e056a38a41d2ce5658 Copy to Clipboard
SSDeep 6144:i31xy/gYvvoUKlLWXP6BKL6GOJLlsBL5A6XK4pg6Xtrn1DQU2YyTPrZn:i31xmpHyL46B5J8L5A6aQ3X51QVYy5n Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\SetupEngine.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 788.58 KB
MD5 42d3836e94c747532559d18abb4693b7 Copy to Clipboard
SHA1 bd11bf8bc270226ec2d032cf89450fcdd57959e3 Copy to Clipboard
SHA256 63265121fd8e116afa2c371469c0fbc132a8e17061ee3f8b63be7a54249015d0 Copy to Clipboard
SSDeep 24576:xu59KMgsIM5POiw1kpJktL1vYMFiM+zIrn2ZMwC:xgisdO+pGtLFxUMtzwMP Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\SetupUtility.exe.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 94.08 KB
MD5 98e2bb3741cb012eace1661cde0340ec Copy to Clipboard
SHA1 005f04ea6fb573108c18634337666ed64108be25 Copy to Clipboard
SHA256 f1ff95e65a74da104b0e1be56621385fdac8c8e63cef971cf192a2df85dca931 Copy to Clipboard
SSDeep 1536:rNsPFZ6WhSSDGJ0EFx63d6siyLEBpfK8a+Fu5mXKHGHzy70tk0Ksyrse:riPFZ6+LGeEr66rpy5syIk0Ksyrse Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\588bce7c90097ed212\sqmapi.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 141.27 KB
MD5 4b6f8be80c531368bc3b3bf916e06faf Copy to Clipboard
SHA1 e5d69304ee4c9f6c0638112eb588cf4d8d0519f0 Copy to Clipboard
SHA256 4ca7edbf33a23ed21717e02867e8e70cbff3e82a234d913ed9cfeb0583d42e3b Copy to Clipboard
SSDeep 3072:HAhgjkvym/vvXFbjYGsdELU2EO0c1X+3gpry7VpHuEpNzlYBsRPpqCW:tk6CdydQTEOh+n7VRblYBst8 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.06 KB
MD5 4e071d06b345db55ac73b16670f1b7fc Copy to Clipboard
SHA1 35e4b8c8d77326d4a4f1bb30c3f6bb69066f14d4 Copy to Clipboard
SHA256 f75e3a7893ca67ee7aff00bcf1f0a5b0628797ed96ea7828d52e13e3c2e6d571 Copy to Clipboard
SSDeep 192:dxyvA8M1rM13mgjarefK84byMnMDVYhKhx0UoiJInmUmR/AMG:dxQA8UMHerei83bVfhpoic4G Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.76 KB
MD5 27518c3ecd036ef25781f5750f73f5db Copy to Clipboard
SHA1 74dcad14145a852e77d1fc8f227370f93be73725 Copy to Clipboard
SHA256 ddcb7d17b3ef4f5777efd2489258a2f3378cfc95362ba47c130845826a0f43b6 Copy to Clipboard
SSDeep 384:WxZksTs2hYdgHP2s9tgxX/5ATdWh44dtTr+YlY8pjBFRuKGMcHFB0sY17kZL:SkX/d2+2yXBGMh42U8pj4KGMcb0sz5 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.76 KB
MD5 46786f9946da1f6dd32a7c985067bc9a Copy to Clipboard
SHA1 c86f7c9068814eb193be3f94c1532720b2d09b27 Copy to Clipboard
SHA256 7425a3829b3726109b0c72c366d8af8a26a976dcd2a5a6a998ba0559dc4317a0 Copy to Clipboard
SSDeep 192:ok4cyXTrt1srnHR9+pX0jdfXSesWEIhp2:o/cy3turnHRs1ipxh4 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.42 KB
MD5 f288bb262ce0be331d897f1f2376051a Copy to Clipboard
SHA1 e98e7e5aa741d237587e35832a9e53777973cac0 Copy to Clipboard
SHA256 fd77dbd249ea5b765a82eca1740499bb80b3ecdd49b5b50e5744c56b5a0e191c Copy to Clipboard
SSDeep 96:wPlLhTcMEME95m2uvuYhrS+sSWIBIuPgDH1zTk:ilL9pEME9QLjrQ4IuPWVHk Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.29 KB
MD5 e96f04af1f0bf12af8c53481bceb9ac3 Copy to Clipboard
SHA1 0cd79a3e5347c050305def035bf1f9a744e1f8aa Copy to Clipboard
SHA256 e9a9833e258e39d99838018d4a7bed1a9b3ce4f35da24f4adda9a5dc5b7b5bbc Copy to Clipboard
SSDeep 192:Ow4yCY5JL+RPNn+IBsjKteORmb3ZZ5FOulqdWyUMb:OHy9R+NNbBsjUeORmbJZH1qr Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.15 KB
MD5 51840b9d562d03cf6fcb9b0a71584d94 Copy to Clipboard
SHA1 e909f8a0956518ad51f76cdd7942723145bd6b7c Copy to Clipboard
SHA256 ed3f24c37ea74fd878220066786aba8a22253bbea623ac51ec25d0f5751b8831 Copy to Clipboard
SSDeep 192:59OLVuny35kiV6xR2fSng28tbuTVGQaeb:5ILWa5bV6gFKNXb Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Logs\HardwareEvents.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 68.26 KB
MD5 b7fdd934add396d96ab72f97f6ae4791 Copy to Clipboard
SHA1 81d92f530f9cd53f015fa61908152b133dff5f88 Copy to Clipboard
SHA256 f812d40aa1ea79c6c028257b3a978f4983ee94701ccf8e21c59471561ea3c8b7 Copy to Clipboard
SSDeep 1536:gnfq81VRKousyRz7xXQ015+N4PCEH87dGZ5KfWUpuao3eq:afq81VcousUhQ01i4PAA5KfWUkjR Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.75 KB
MD5 2ab0d16ef9a0b05875d8a3acdcb87512 Copy to Clipboard
SHA1 d7c7970e9afb1e6dfda12bc0e51577c10e67ede5 Copy to Clipboard
SHA256 47fbacb8ced8d20fe06a2e62c65dd72ebd30a7a183dbf144de7162834b4a1e6e Copy to Clipboard
SSDeep 96:s6D2goTDhQKHstITgkr5LH5/JHJ45RV+Dz3h5yWLXjJeqJDu/3U/5YXYt9poHnH8:7DmTyK5kIDz3hdXDy8RGiILYxKF5MM4V Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 764 bytes
MD5 20f3dfc6608b7df9a02c9af30ad38b84 Copy to Clipboard
SHA1 5afe6d000ecde27415015017d4ebbf65a4ae0661 Copy to Clipboard
SHA256 115b7815c658806313ef2403f266d96a11e1161c295358ecfa85aa817b0354e5 Copy to Clipboard
SSDeep 12:bDGO6vMdRmFWzUQM1SYLDGYqY2C7yV0yZrJHyLaFB0++xS/5GqawSvcsYypJf:bDGyP9M1hLDGYqX1VJCzo/ujvo6Jf Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 748 bytes
MD5 2093c7d880df7ced5b68e17f95f646ff Copy to Clipboard
SHA1 b383f9e20ec5f74fecc210d472b4f8df58e17bf6 Copy to Clipboard
SHA256 837e55caf2ee220e684d90cace095a7159d24a1af05cc28400c4f11dba1283aa Copy to Clipboard
SSDeep 12:rISnvsdXbyyDHqGyGIG7ejwiuWTTEhf2MX5ry068RhN4b9uYpw+ME+5GqazZsYyr:USnvOXb5HqILkugTIhI6s9vpwMXzV6Jf Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.64 KB
MD5 bd4aaf6fc44e5ace80b882053e3fce5d Copy to Clipboard
SHA1 4b4dce8c243f975ac73881989f464841b84bddae Copy to Clipboard
SHA256 49461afa3fe1c15007e1f27dd5b13c169ad27af085c2acdbc09db56df8023b2c Copy to Clipboard
SSDeep 384:V4MI/oMpJuPgCkOjSiLPqbfPnbuGgnBJMyIRUqv:o/Og9eLPqb3bJg3cPv Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 11.86 KB
MD5 ba8a9ec44b3ed1c90505791e2821cc95 Copy to Clipboard
SHA1 4f71a706a54e03e86e3838e3bc57b890f710133d Copy to Clipboard
SHA256 a334e94009643147e7f624788320e597cae614e700e66db8da80cdd1cd11d650 Copy to Clipboard
SSDeep 192:gaVIH7ty4obK2b3BIzlN9GP6ACl7on6P5msuHwOk5WuBK3TjSS3ya4FazK2eBUvz:g9A3bjb3Yto5sdOk5W53f4AzKf6mYh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.31 KB
MD5 d8be43182f07f95f267b76b9c881172a Copy to Clipboard
SHA1 4f5ff1dec7e738f99cb872345445f31e01a9b71c Copy to Clipboard
SHA256 9f89e020993e9e1ebd4a933cffed986d79b1a485f38b93fc7df1eaf3625aae47 Copy to Clipboard
SSDeep 48:S+oqsHis9xWYYsyu1NSkyD+wz94nINjHNKSosZJWLI/QVdyXoTgNykN17lLV:oqSYzu1NTozGyjPHZJMGYhgES7lLV Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.43 KB
MD5 e82bbf7dccbead0e150f5fd28e433f5d Copy to Clipboard
SHA1 d229358d0239eff1aed90d1eab48ac9c3bad3b69 Copy to Clipboard
SHA256 6b8d7f116dbcfdcd6cb230e8630e4c0d37aa99071d6601fd4d4caae36a09ce85 Copy to Clipboard
SSDeep 384:atFxAYKvYGE/huMefCg5b2VJJJKAC+wuB11gd/MYpK0I:atKvCkLfCKqvG1M1O+/T Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.37 KB
MD5 fbe659141a6b71fe77d0823873f41e02 Copy to Clipboard
SHA1 cf46fbfff4b27fc21fb7743ae14ec645fc7bf08b Copy to Clipboard
SHA256 0bf3864cec9b39196be5556d21c17fe06a3cd124351adc4e359220d7c21c7c09 Copy to Clipboard
SSDeep 96:j8VhH+4nloGR2trbIg+tyTkktCfCEbDbUEQ96bpUSKcfJ1e:wb+4CiKXIg+8CfVbDbUEI6bpUQfJw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.78 KB
MD5 d34b4461486b43c0b2282d99fa7e18fb Copy to Clipboard
SHA1 bbf4e5bda7552659c52fcc24a4e585321b95887c Copy to Clipboard
SHA256 7e060f3f6542fe9ccec15758c4ad779c369ad7ef2c8f4b248655511bb2be1da1 Copy to Clipboard
SSDeep 48:XS1Lryo/+9uQUnpLmIhj3Vew8lw3i8b2hDMiGrP9xv7jUdc3L:i1ryo/guQo6IhjleMF21M30mL Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.59 KB
MD5 442e7d8275737d13067eb06b42133a76 Copy to Clipboard
SHA1 fc0589d32a0009d97c1dfd242f94cd6ee1dd6fa2 Copy to Clipboard
SHA256 f2fd286a80584c47945af0b9ee6aa5a738a08936ffcd99939fba3df2b69044b4 Copy to Clipboard
SSDeep 192:JL1/vg3PGVCAXThJLFutDFno+yZ49ltXcDUS5mayA9h2KLNXdlCLwUgpzr3C7:X/o3POjhJxujo+yalpxSt9vJvCkUY3C7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.18 KB
MD5 5bb1ea0a2abf09e9fec06d42836994e5 Copy to Clipboard
SHA1 8128153f0d47cd574279618bf1be26afb94e9bcd Copy to Clipboard
SHA256 bed73a0c15c67cc836d8603f2237d0ade8fae703c9ea54996f8224eb1238e40d Copy to Clipboard
SSDeep 384:AOT9wXZLTsEddmKCuDznEHwwlbEVPN5i117z38FhkvCRFJUm:AWcZLIedmKCuDDQwwlbEVPN50Ek0cm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.43 KB
MD5 f090ac63f0831355d98df9c7af7e824c Copy to Clipboard
SHA1 9984876ddb7657c03c29655922142e56e6f18757 Copy to Clipboard
SHA256 c1062506488a6cfa439c785c04f9b652bf0071ac887d43220e395f754f462139 Copy to Clipboard
SSDeep 96:SyoEw/+qgzBKxjaoklrksITdfw4s2uAvQeHErZubpCf9Iwx4rgbKgSmxo:Syc/bgzKja7Yk4+AvVMxdsOza Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Logs\Application.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 68.25 KB
MD5 29fd022817f3f561db03c70a46d383ba Copy to Clipboard
SHA1 c685102b5adbe44098f216217d933ab7e5eb5d78 Copy to Clipboard
SHA256 0585fdadbc4abc7b0d41f02e683463baecafe8c0ac4b5c91802501542af0fb6f Copy to Clipboard
SSDeep 1536:tjniZdnm2ZYPRSzZ+TJu25SbZbaWCwpRODQP:hnirlQaZ+TJL5SFbq2 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.64 KB
MD5 1c6c8f1d21c4cceafe6114b51108a47d Copy to Clipboard
SHA1 90dacf2cf599c2b4d735921bf0b38930fa62137f Copy to Clipboard
SHA256 154e201403da1a0dd20297d4391f68ed3e196be799d7e00c3f1e24a9c28159b0 Copy to Clipboard
SSDeep 96:MUk3o3jyg0dg2oJtYjjfN1wceAxI721G9LaL:LTh0eRtYjxWBdi1G0L Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.07 KB
MD5 4428e8bdbbc0036ebcd629fb8eedf745 Copy to Clipboard
SHA1 280b63d1f0b8e8e851bf0341167101c851cabf9f Copy to Clipboard
SHA256 66a67b9285d82e5f26d2c2380c2a1fa237afba143851b5c4dd7289a653cd820e Copy to Clipboard
SSDeep 96:DZ6n5ZCRHTGL1Yd94bKLiKzHr60GKrddDUTT3JHFE+fYy9oeqosLnWm002xbymCB:Dmupd9+KBHr6/QddDGFxfYa6oGUyNB Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.36 KB
MD5 4fc10f52d33024a255ae310be4560f3e Copy to Clipboard
SHA1 589e65e4b235d8c29ea4e5d459210832af1775d2 Copy to Clipboard
SHA256 93de9420e4f04e0a96ee0ed315af730aaa8e9c05061351289c560d6b5f467aa2 Copy to Clipboard
SSDeep 24:Z5UF3Lm1keIAjOTQqVyH4DFmdLmuQUM77nIYNGy4crWwak8uq6Jf:Z5UF7FtwJqVLEdC1UM77IY8w8Y Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.64 KB
MD5 bb10378e2af816ad2fe8bae145344235 Copy to Clipboard
SHA1 05a8a109987a0890c33e41024de2fa0987c47055 Copy to Clipboard
SHA256 163cbb7e7b0d3c7288495bd21ed8eaa68e03d01fa5cd6f66ee4ffff389442300 Copy to Clipboard
SSDeep 96:6tNNm6wrI6Qr7DaLIA4Ld5HPWnDaaQtYxfh2x9YNjFMMeWMCi7r5Rq6PTGS/x3Nx:AorI6iDYqLvWn2s7AYdWceR9T5n0C Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.06 KB
MD5 47a9b777cfb39d15f2e20aa439944432 Copy to Clipboard
SHA1 a438b72cb1db665b19411ef6e30f2ba028d89223 Copy to Clipboard
SHA256 edea724315a58e288717c7c27f8f20bc6fd6d4a82da9bfd37d4d4ac5f5099fe1 Copy to Clipboard
SSDeep 96:kuElVJu1yx/j/7Z9oLmD4hN2NIdWDJuneRrNchyetx62ZRodVhX7633/8BNT93zq:mmyB7HoLmkP2NId2Oye76sA23iNT93xM Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.15 KB
MD5 443ff3bd7e028a6be0f02f69cfccbf65 Copy to Clipboard
SHA1 a776f013ebed97b79cba5e3c2875bceeb013d50b Copy to Clipboard
SHA256 672b162104ad461a315d7843db120f820bf285f611de12106ccc424c2dba05f2 Copy to Clipboard
SSDeep 96:Ao9OwsnujFaxz8snErf1XgCL5CtglQrGN0sPQJEHvcOUf/IyXg2EVK6c:Ao95mtET1X15RlQaKsWI0tf/Dg2ERc Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.62 KB
MD5 87f01c9df86b89f7506864113d69090e Copy to Clipboard
SHA1 4e59768a0860ff2f7899bad9bdda412660462985 Copy to Clipboard
SHA256 9168effe2d9ba74b741d58400cae4392b49056d1cc285406e04a851c928e01c0 Copy to Clipboard
SSDeep 192:tbCOVcTvKE+ge8WFatvIFYZ7UUL1V4rtv6IrDV/jthG/2VSzR:tbPVEvw8WFoIFKUU/IRr9jth22VSzR Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.01 KB
MD5 901d92bf1ad2382ce0bfa788c5c3e029 Copy to Clipboard
SHA1 b79e3dc012f82a12fc3bf90f422fee39a2b88824 Copy to Clipboard
SHA256 9f1b4c9ee760c3b0d34e4eb20e8cd8f44d3703f41bd5d4612aecdbf00fde02a9 Copy to Clipboard
SSDeep 96:HSwe10EsECmTeRoDpMGyZVABQFs6g0HrZ22cGmT8hw74G:nKjCmTeRGmWBis6btkGmT8hQ4G Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.48 KB
MD5 1c2a5a4aa68d568fd555c78095aead2f Copy to Clipboard
SHA1 007a9c28e46506de8e02a4449b077ae423b6e489 Copy to Clipboard
SHA256 97a7b59f713666a47cd005959dc3ba5a83a3befb8d0e23480fa7b19276e0fdc1 Copy to Clipboard
SSDeep 96:oazBLalVAXWovQTR/da+p90Gx4xmx7I0u/NrvQgYa4IaVsNmIt0xkb53j:o8BunH/Ig9XWjjQgWIWsNexkbN Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.14 KB
MD5 356238e14dd535d21c328c782ae5d346 Copy to Clipboard
SHA1 541f2fde8674586374f77834f15b5589b96debad Copy to Clipboard
SHA256 2554491c2e5da3671b922685fde31f1c625829ec942106327c180b09b0240b81 Copy to Clipboard
SSDeep 96:jNS4u5VKdNG3chNxF/sBa3Efo7+drKOc1GsVVJqUjCUW6B1t4a:RS4u54ucTr/sBa0g72nkVVg0rW6B1th Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.53 KB
MD5 54d03350e3a1e93adf762c74016415d5 Copy to Clipboard
SHA1 236b1c7e57928c7d898b0c33224d03ca334b4fa7 Copy to Clipboard
SHA256 b37d335c64893a6a9774af9c40258dfb1996c34d2562b338c5df9522aecef448 Copy to Clipboard
SSDeep 96:ElzzQ2PitssqpFS9z7RW69qNLoWbGcE/YacFPbh4OnbDk3csz:EpzvPwqpKz7g6Io9R/rUPF4Oc Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.11 KB
MD5 f15c54ec36bbabeac03e551ef771d699 Copy to Clipboard
SHA1 e88f54b6ef0b526d84fbfa26888beba21065ab88 Copy to Clipboard
SHA256 39d5854a6b44b5d6b530878f086cb59181144b754e05ee74fde7a8d8e6c6ce9c Copy to Clipboard
SSDeep 96:iMMwtI2PhsWT+VlBMVUeMvMBIPmzSctIIflz405XA/:iMXI2PD+VPTe2MDOcXdBRe Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.54 KB
MD5 2c33439cff6b07b38d88a0c7a2875d7f Copy to Clipboard
SHA1 c5cbf5b5a1ea1c2f255be5b449618d80444111bd Copy to Clipboard
SHA256 fb98adaf62f0023f13252e458889bf5c953e3691e31d2a8880c23d2188c36406 Copy to Clipboard
SSDeep 96:+hNPPI25B8K8a+DIpirIZRB9BnJPi0wR157EVXR:6Xka+RrIx9BnliHR0VXR Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.20 KB
MD5 eb16b6f7cfb888749cc69e584ae940a0 Copy to Clipboard
SHA1 79b506d67944fbacdbd4e642f0ef16e571c00684 Copy to Clipboard
SHA256 26a71d40066e971a55a3853ced1e2e854033ccebffe8dcd71feea2d78754aae1 Copy to Clipboard
SSDeep 48:E7cOfKKf1vHKyMajm1h7Q3tV+pwJTiI1GozgsZOondBPGI7gx+CSoZw:E7c0Jf1voCWwJDjPZOoSFx+CJZw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.29 KB
MD5 605e9e6ad952f86b012bb874f5468983 Copy to Clipboard
SHA1 db9116b0fd68726db442c269ed45d2a1b1918e7c Copy to Clipboard
SHA256 898594caad3c39d27f5ff29ddb093f2dd5fd0e81d144451a808740078a5e7506 Copy to Clipboard
SSDeep 48:G2GdpNfv3b3KhMC44chg3FpyZU53nsYPEGZAtfsLjVWUNU9Efgdmvfi:G2GHNHrjSKg3Fpb53hPEPtELrKEVfi Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.86 KB
MD5 4d6d2a2d22ba34452e3a95296f6cef1d Copy to Clipboard
SHA1 b9cd2f03aef484609cacc129474b18b3c072cecc Copy to Clipboard
SHA256 ca7bfda4bf22ee974f1731a7fecac583b6651f8b910a1cccdf18276222cdb059 Copy to Clipboard
SSDeep 96:xbdYI2e3tFT6dBiuB9E0IGBm6thaHCzfgYQKRP06DoDkMqV3t60V0Ipzn7M:x8eFTia0/Bm2haiznWIpzw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.79 KB
MD5 b5577e0b92272de352dced4a3b0c1e28 Copy to Clipboard
SHA1 f49f81cfa794a993aebe08f59d6fa6074dd413b2 Copy to Clipboard
SHA256 682c940cf8c4581024de531ba5daeb4590633e44c9593daf43f9be1e4623620a Copy to Clipboard
SSDeep 96:OZQdBos9i8xySfcSSXc8HdreFMhHk+KFv8tNQQIPEXLfmsqcUNlsTxyMpka6tPEE:QQdBos9FZK9reFn4tNV20icUokMph+XF Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 20.34 KB
MD5 0036ab15a548a8878fe4a017fa41feec Copy to Clipboard
SHA1 169c1cf4c1fa276b499c795914656010a847b200 Copy to Clipboard
SHA256 b439ce839d382120449cbe02f21a771b13ac711bcd23df377cf18875ac9b01b7 Copy to Clipboard
SSDeep 384:P94NWh4KpNGoHZlhS+W2O5PB6VWk+kpbl4A6ZnwTs8/uebiTMhhwzNa1CYWmOKn:PmSioHNi7lklpblTs82eb4IhLQYAS Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.82 KB
MD5 c1ca514a0f2dc33360ad0eac7b222241 Copy to Clipboard
SHA1 796a72697339a9e10b6011e6f3877784ebcc49e7 Copy to Clipboard
SHA256 1d2be789681379c751d93a8bcfa3001978b48f006b2c989dc6e57e4e1c34bc13 Copy to Clipboard
SSDeep 192:4d5MdpAFLWWmTdYoBOT+iZ1Bk+YQMIm/dSMck2VSES5/3EaKWvFNZVQwS/Y:hdUL0YThGdSZkmSp/3xK+F/yg Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00932_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.32 KB
MD5 5063651791b6d1d2b159e98d8d993439 Copy to Clipboard
SHA1 fd50579ece00a4237e2c66ead2b4c5502a061841 Copy to Clipboard
SHA256 f7e5a834b45785146c53d6085dc2caca1850336ba23490fd0537059d998c6caf Copy to Clipboard
SSDeep 384:au7evcXr5u8DaEIepXuNnYolIK0esmb/0giFoonbq:bqvcc8DaKsBlIKB/0+onbq Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.15 KB
MD5 b24916d6aa9e4758ed1b77915f2c8270 Copy to Clipboard
SHA1 536b9582cef3e54ca0123d4673eb26c61a047e36 Copy to Clipboard
SHA256 cb25431bd9c696f58df8fab3d38cc92181ecf958b7afd887dd2c9e0ab221e192 Copy to Clipboard
SSDeep 96:IBr5rFHzX2s4vuBWwmUvPZnjg+u0s+bGOp51MNZHx1/VYgL6hO8SGoY0wM:8r5rVGsVWwmUvZjxs+5poxTYS6M8SGoj Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 13.18 KB
MD5 8df4d73d174e39b718bd1eacb3c9f611 Copy to Clipboard
SHA1 f1e2f72cca6256a003ff7e3c0a1b9abdc02a2e58 Copy to Clipboard
SHA256 f854017cdc15e7d7694803f0a4f7d76ffa46e6a71c7a68aa11de214111bb7054 Copy to Clipboard
SSDeep 192:x7xPJnif4wwOs4bhdL4ti6LnfxOEjGjAl1PiS9B0oKLoKCy97E6tgQggJm7i9k4I:x1VWhdLr6Df0EjeAl1Plb0lL7EzQcivI Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.28 KB
MD5 273d0ce8ea58e80cce35b70d0dd01777 Copy to Clipboard
SHA1 f0ee639e26ff22ed37c689f4c74fec4259c40b69 Copy to Clipboard
SHA256 33d811bf552a2de2ce0b7f5b69f249afcabb81249c04005aafe04c40230fe91a Copy to Clipboard
SSDeep 192:xiIUnPQc4qfK/ZadXTFG7yxqv3+li7At1EakkUv:8i/oXsIPo7Akak5v Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.51 KB
MD5 d19ba22d1f612d19af8d4f16210942e6 Copy to Clipboard
SHA1 582c7eed38745aed481ac627fff8eae5b716bd70 Copy to Clipboard
SHA256 0e3d799760c68c26a5a4be24de5d622a9c785b08d5f72539b133540594813a8c Copy to Clipboard
SSDeep 96:+qzvNUWCWyTN/Q3R6SuqXiObS81GpHsW/i/1+7:FyRN/Q3XIdHsWb Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.79 KB
MD5 56608efa2d205ddf5580c8ad92223274 Copy to Clipboard
SHA1 e76ad677362d342074a6d17025971c689006b66d Copy to Clipboard
SHA256 fc4bfcb473555750dc8f3b5224981660f60dc55981cd63283b9313b76cedd909 Copy to Clipboard
SSDeep 24:PUIyqJnFgJYzSjpGEW2kBn3ee/qNBBisC+Tp/F4NWTmgOZoF6m2Bm9SafhSIYW4Q:PUozztn39/WBBvC+FWgnF6TBSfwIo3A Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.03 KB
MD5 135aff94a88b062a9b5c742968a7baac Copy to Clipboard
SHA1 e5574a5e452a57bce0f87fe49b23f07fd58c2124 Copy to Clipboard
SHA256 c2da860ce68a5f6a5cfab43f89b700c258dd6409f079ec950013b73831d33679 Copy to Clipboard
SSDeep 192:cyNd1p2ezdPYP6kgl1dT8WDKPr+TrDeJ/CAylR40WW982LCA7:cyNd1gezdPYpgl1tWDsXeJ/CAyn4fW95 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.03 KB
MD5 d570b7ece4ad71cce9857f3e945dc091 Copy to Clipboard
SHA1 851215719f2c0023f7acafd0c8bfd5c983a4620d Copy to Clipboard
SHA256 5ef5b634bb62afc4fcdb514b96b1fc392b343c72205394b7bf4c5e011b36996f Copy to Clipboard
SSDeep 48:/mrBeUgqbxnlw5w+rpk7qDr/OQcFQ27hCXpwfwSvBYF:/Mxn+K+riou7gZwfwgBA Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01173_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 25.95 KB
MD5 9d3487ad497de224a6eba624d2539085 Copy to Clipboard
SHA1 42d0594424f2ef83b925e2df5255338e21d78220 Copy to Clipboard
SHA256 da25a353ae0a6c42669eb9c1633443016709811beabf39d0d0e06f8825df650e Copy to Clipboard
SSDeep 768:8c3UWw3PISmBL5QdOxbD5pTruOX9hyw6gUhjj19:8OU7PKnQd+aYww6gUhjp9 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 27.45 KB
MD5 b83eafbe6cde2a5dc2690b86d87e4154 Copy to Clipboard
SHA1 93aebabdcbc11a749748eb6708bb0b21a2441b12 Copy to Clipboard
SHA256 2b08c0f82c777bff54eaa583623f0c271473f5e50aa295d55e67c379f98bc634 Copy to Clipboard
SSDeep 768:BSodt+OTbhWgYkAnJwOf7Gvzv3AHQjh7PAB+:faOTbckAnJwOf6rwHuBYB+ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.93 KB
MD5 ff05d33a603c3adc2788f2cfd859bef7 Copy to Clipboard
SHA1 49325c295bd1cc196d184e70c53750b258ff2f07 Copy to Clipboard
SHA256 bf3a29a124a4e0a5dcb4f8100a8493aed3882bdf9b4162709e398a76b8a7b466 Copy to Clipboard
SSDeep 96:T/JMT5t+RNkN4CoDP6KdEHFR2J4sk30LNOFfQzZaPGYyd4u3rj7EF3bqOtAAHUP:WTD++4CWP6BFoK3iNBzZGg4wvM32yNUP Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.18 KB
MD5 272dd5707a4458c8311e170ccfb12409 Copy to Clipboard
SHA1 926fc778513497434046e022ddaa8ab85acaa1fd Copy to Clipboard
SHA256 45df8b137d6f158b95a812d46310e11863fa87d91503072b3b7dda4bf61413ab Copy to Clipboard
SSDeep 96:3qB7uleryjDiwvJ50mKXbZ8EXx4Zddq9+LAk:3q1uwrzPLG6xj8LJ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.43 KB
MD5 12ffd72bc2f3bfe0367423cfc28713d4 Copy to Clipboard
SHA1 47d0f6eea2a3ec22ee9f8fe2cf2404d43730c6e4 Copy to Clipboard
SHA256 be93ce17dd8b1e3b4d75ec5b5240999a5451e51b2fd82caca9047d2213c0adf3 Copy to Clipboard
SSDeep 192:jkuq9OcrWHBupdC6xzX6w5S6qJp/o1jv4oqu0VeHrbz:jkuqYcLCC6wPvAu0WT Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.61 KB
MD5 f2f5edfa411957b6a57d183465e97cff Copy to Clipboard
SHA1 f586a628f06f9319e54f134d2877244def6350fb Copy to Clipboard
SHA256 ae45a8082bf1cbbb7334993e7967c0a7b23ee2ac1f04b3d7e26d826a3215d3a1 Copy to Clipboard
SSDeep 192:o3lPSTiWvScWDEXtqciGn0X4Ym7suSPKv3861Hj7/sq7ji+S/p:oVPoBvVWDEQc4Xnm7sfPa8qHHEq7ji+A Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.71 KB
MD5 c304c1b1fbf22f773b48072083849eab Copy to Clipboard
SHA1 b4c5fb7decd96814c0aacb78fdfade39a1249b7b Copy to Clipboard
SHA256 e5f03006ddade33dedcb84a721a68bf45146556181d7c7f07eb38d9b6bba2ebd Copy to Clipboard
SSDeep 192:jxqaSW/l/X9oA0WtcbPsj2hU88zu3crrUvquaUZAkY/:Eapxd0WtcDsj2ut0W7ua3kQ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.26 KB
MD5 9814cf25b2ebec72c4c49e53fe7f689d Copy to Clipboard
SHA1 783e5f63caccb56c7e02558e64a39cd64569b938 Copy to Clipboard
SHA256 5b551d0b579d92616e04ac958516af4e4dd1ef50a61580988a54541b6569244c Copy to Clipboard
SSDeep 192:w8RTzNHUp1wI4ogZFgCFPUQrLua0C4qXCFugPkXFkqwrFqCkT:w8pzwcDFgYUYaCnk8VkRrFqCkT Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.53 KB
MD5 d8bf7f9df613a23c435343f3d6b0168f Copy to Clipboard
SHA1 a41c9c98d46093ac5b043d12482655cf6e9c3abf Copy to Clipboard
SHA256 99366785e25c672b833c55743631421e5e8005cc188050d699f954c106d47cd2 Copy to Clipboard
SSDeep 48:6usTm/TUSjatmggKCZeB0hzg0ZMdMV2Z34R8SvsVw2Ce7GYnAh6pyo+bppREC2F9:maQSE6ZbeA2Z3B9V/tfAh6pyRpwC2v Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04117_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.15 KB
MD5 789fca6f9767584c917c9f11d3137375 Copy to Clipboard
SHA1 0b02ed4217f57303e86ad3207193375e7d9a053a Copy to Clipboard
SHA256 5d5d2fd024d12926a7649208141596d1c785e115b4716ee7212cbe74600e46e8 Copy to Clipboard
SSDeep 192:5Bgfw5/w5D+2Vx2cyNx2tt+MlrZMgnTKFy:5BBtHQtxRZ5qy Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.57 KB
MD5 e92abccfad6942f91d15c2531cf56864 Copy to Clipboard
SHA1 ad61a2c69f006eac6b44699ee172ef7fe520ed53 Copy to Clipboard
SHA256 eb60ed62d20f68c58df2662c9e9627d752daa1e30f94acf69e72cbec52d639b4 Copy to Clipboard
SSDeep 96:qVLrFwV6F4WsIzPWcqHr23ZdHsbTKhwxGfFSpbfWV:iLrFwV6WWsIy5rYTH6TzxGfFSprs Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.90 KB
MD5 946decd890705c8dc8abfcc9f5cc4b62 Copy to Clipboard
SHA1 f0946d27966e43b74dccd9885862622e613c771c Copy to Clipboard
SHA256 b87c1b4afd4c6e42b45581fee996bd080158651eebfee0f2f17c30bd63798523 Copy to Clipboard
SSDeep 96:79y4yjeTMFEBsNfJcGDbXujC3AfJwPjgo:GOMFxR3sJGjr Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.71 KB
MD5 ebbaceb781952e6629ceedb6f5a12394 Copy to Clipboard
SHA1 d78af44d6c8d478902c74bd35cc9e4e0cdec65b0 Copy to Clipboard
SHA256 f076dd9dd3058db06bfc71d2de0c8771a7e464e965d0a342fa947da0c92eaa24 Copy to Clipboard
SSDeep 192:4TVoyXmS8q+rzuFfkEPheqpo8+pnzwOyIFK80AAm:4uI8xrzokgRpo8+pzUUKvtm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.75 KB
MD5 7db08354121937b5a29ad22bbc18d56a Copy to Clipboard
SHA1 63d4d3690dfd11d5520816825426fa188b140b3a Copy to Clipboard
SHA256 5139921adfc883a618a7eafdfaffedee53d645d150125ca59e50ed9cb09bf459 Copy to Clipboard
SSDeep 96:Kk4hxrsll8fmYSAx2hqbe+j/3ln7aAhHPKgTgYDYsMGum6L3/:n8FfCs9jdn7aAZPKgTgYDdpa3/ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01251_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.93 KB
MD5 5130facafb5f9c04334c1d9bb77d7f8a Copy to Clipboard
SHA1 a66e0cfb5b389341fe8c9d075dbebbb50cd9315c Copy to Clipboard
SHA256 38ba576e4bd165b50e5d4378f819a2a6c0c732ebe4f9ef7534319a60d41ed257 Copy to Clipboard
SSDeep 48:gGVEvrc9ipHYPbZKQlwpiY13qqFvKHHoWtbg/pJMd1EUQeTDccPgyQaI:gGVEQ96HIFY13rMoWt8gd1EteT7gy7I Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.31 KB
MD5 33d28ccd85a1663d0693a1c786c77587 Copy to Clipboard
SHA1 f0caffbf679b14e2da50c9550b1e547230fed919 Copy to Clipboard
SHA256 5b9d7a6bb7be411a86d3ccc4729714d7cc8a634f57c9543041b66aaa431f0ee9 Copy to Clipboard
SSDeep 96:TerL76azkcfQFSIp0jPTIMgvu78UHvumJDY:TeCazkgGN0jPTDqu78UPuuY Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.73 KB
MD5 941bd7f36b3f1a678fd9b5e7660ed54d Copy to Clipboard
SHA1 bae233e4383909e2a4cb97760e43ab881f9eabd6 Copy to Clipboard
SHA256 04a0fddec0b1403c1fa8c17a0db2f7647c09d5a00d6966f73859334346bfb50d Copy to Clipboard
SSDeep 192:uBWiGuPrpMDbMbgWAdW658Zq2jantzgNaRNTP2wFIeuGrBbj:x7uzgzb+q2Wntdfew6ebrdj Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.53 KB
MD5 e349bfb04f10c6d1c86892245d48108e Copy to Clipboard
SHA1 146eb66c2db897be01013fa77162d2acbaec41c5 Copy to Clipboard
SHA256 4f502ceac81cbf910d809f51e93896c10e829a2a834239e0f531214c2a0d1c7c Copy to Clipboard
SSDeep 192:hb280bNoyB8ZssB/jCdaGU2/7Pm8Rmgu4Udo6VLAT206e9o:p2zJs9jKaGUC7Po3d/sltm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.29 KB
MD5 07b73c6b5b328ee54903c8ba649a6296 Copy to Clipboard
SHA1 7ee40fb0d1bf1c1c2e8adae16db7f27b6ab645e0 Copy to Clipboard
SHA256 bfdfe94f380d0c411fc4aaadd2652ad2d4c849fb6f910cd65d96526ecc64b944 Copy to Clipboard
SSDeep 48:chsdLRa6nenpTj+nw83mtwFD41LFjZA13ICU4b1LGDTFp:q6nenpqr41LdS13I29GDTL Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.86 KB
MD5 d51241aeb4211f48d23f37078e3fd31b Copy to Clipboard
SHA1 71d7f7382cc4f36d618e5e9d7c09f8f0832267c2 Copy to Clipboard
SHA256 c3cd4394470118cb08ae70ae036a06c7a36079c60a575e8533989fb1d354af72 Copy to Clipboard
SSDeep 192:NBnsQstex8mWXJG/VEHqXf0Pw4fIzLxjTCXRxTfRjd7HD6y:NBRx8mWc/GqXp4wJcRjdn6y Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.21 KB
MD5 d9a1b98b9513ca3367a9ef0746bff15a Copy to Clipboard
SHA1 a53e84afaae2e31e0820dbb6c4826721993ea2bc Copy to Clipboard
SHA256 c1874ec2624bdf544b33f009ade77e71da80952ebfbb8446de7f7272f8a6cbfb Copy to Clipboard
SSDeep 48:3X4SGjDxImH1CbGg2DbYQWevRL+Qh47dW:3FGnxIuRDbieZg7dW Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.67 KB
MD5 d3b347f037f53f015dd859f2b06cb6ec Copy to Clipboard
SHA1 77c2a650b4529434e1936343fe3aea5671ad8b12 Copy to Clipboard
SHA256 0e223dd8d83d5b6788453c72694278987dd337bbe1805b4ffb98c9a8a6eae1f0 Copy to Clipboard
SSDeep 48:aqLRcz44OkSDZj7mLVUGRUwfEYckXVopKzQXjuogpkO8v1S0G4TkgpU:amRY44byZmqwtsYcEopKzvmS0hTe Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.51 KB
MD5 160d4975d9b1c1e7d27c6cd0a96dc0c2 Copy to Clipboard
SHA1 dd04d74d7ba3c108aca214015027f78c08b271e1 Copy to Clipboard
SHA256 ee22e5d552979444f0a341a911f76a868e8f310f96622dd5850b4aa0676578d8 Copy to Clipboard
SSDeep 96:oOwWwwmQv00mVROKnhqkrzdv9D49cPbw85Z:oO9XzmVROehqk5kWzZ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.81 KB
MD5 c57a9aee8e362165a16521c2618ef103 Copy to Clipboard
SHA1 5204ca89bff4c69d6d9e739d0a0223c8342d7f9a Copy to Clipboard
SHA256 40c3e3093124f2c6b23f0dee999e7ee8eb03f50da4f47c2d3f7dc9c6958a0785 Copy to Clipboard
SSDeep 48:WcvEgd2Z5zFNuDHqDq4E8ilN46yNiwNjtdUxKfARQLrEDnD2U+8vebYFzhv:WcsgInJNuwy1lN4HNiwNjtd4+PCJ+8vh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.86 KB
MD5 5e9b526dd9de400b99b8087e1ebb7763 Copy to Clipboard
SHA1 f54b4fbb5a28e1eb38e4c12dcb1f8aa9bb154b62 Copy to Clipboard
SHA256 27b809e0c7d02f2471fca69e1450839e5dfd88f0d3f5ec4377c611e4182689b6 Copy to Clipboard
SSDeep 192:/Ppb3SzsbaLctzBol9vQEjEbIvEJVmmE57BH4jo:/13SgbagtMyyEJVwTYs Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.39 KB
MD5 da506723d78e2a13cd98648401b715ae Copy to Clipboard
SHA1 b2da249635cfeddd3d01d4815f22d57fca44dad9 Copy to Clipboard
SHA256 6be56bf209753134390afca46c56042cbfcc58c42cf7af3de3348aec0205e873 Copy to Clipboard
SSDeep 96:1McV9XAE2fIs0PZoXhl2RcQR/o7l8S7LEv:b9QU5xoX2K9mv Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.93 KB
MD5 19b5fb1e75833496c385bcd48d8a780a Copy to Clipboard
SHA1 6e4c0c1e5b3db68943e319189227b1512e70dc9f Copy to Clipboard
SHA256 8219d7ed9f5fef4b6012135367624777ab200d0c37cb1b89fc8588a90d52552e Copy to Clipboard
SSDeep 96:dt9XLYCDfe6vzYdpgxXcKUcn80p/vp8FLGg0f2svilZRRN2v0tYPL:doCD5YdceKh/vp8F1saZRN28y Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.12 KB
MD5 3d5f4edcd83f120d14eec3ee0a7660d1 Copy to Clipboard
SHA1 7571d977767df8c29cf52a63181c0963d39b34d3 Copy to Clipboard
SHA256 631c1b22e282806a7e90a5ea60a8c591f49df50c657b1ad767f4f233db28b74a Copy to Clipboard
SSDeep 96:wzNOqYJuMCci23NUAnzyBvOWrA6JLm/W1eAVYF92mpPPkUJi:JVC+GVrRL1S7Hksi Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.00 KB
MD5 8e85501e780e5849ff2d513343afa534 Copy to Clipboard
SHA1 a267d5919874aa41939ffd00a2fb29775d77199e Copy to Clipboard
SHA256 5dc343784c2e53c5f28f07356e88faa5f7f83b49e5df665ed34ebc3efd7c282a Copy to Clipboard
SSDeep 96:6OxJIxPAxbZR9dy/NsvRKjqP/Gzr1VNI0WIqTUBcbo+uq216q415cn/VqdBqasb:6OMxoxbyeP/GzrbYoC216qAw/sWxb Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 26.50 KB
MD5 1528231ffad666ccaf0e4f0fba6b1f4c Copy to Clipboard
SHA1 8602274bd96e73408b4dc9d5e958bb4ef83fb1a6 Copy to Clipboard
SHA256 0b0ffcc09fa3a5d0feaaf68c0d091437c92909a18e5b5b80cc222f6b05115734 Copy to Clipboard
SSDeep 768:jcRSCn6B9leFQoDQFn50iP7sSujKOD5++r2DNQIXZO:jWSnrcQ7sSQD2RdO Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 28.51 KB
MD5 9a061b337ddeeb36fbc8b1d8a084cb7b Copy to Clipboard
SHA1 9d462e93607e6d7d756c02188c8547326008da6b Copy to Clipboard
SHA256 616766adfa260d6c15c9c37c727445a3c28a4dd5b72e46c5fff024b9df8db8c8 Copy to Clipboard
SSDeep 768:xQmFxYcGQbI1+k8f7u8BXvnWYcn0HDBktAs+ezOU8Qf:xPFx7GQk+k8B/nWYcnCynfOi Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 22.23 KB
MD5 accf6b743f49553c9a3bf5a4b09b7d9a Copy to Clipboard
SHA1 ffeac18135eab9d2db5b712b368dea58c2215d10 Copy to Clipboard
SHA256 13ecb745a97f4c2409f25043f05dc54ea7d0201d7ca2b211daa4eccdaba12eb3 Copy to Clipboard
SSDeep 384:EpLmTfNK/KPJh5rC2XnbNgUBCehjIWj1wehARJ40YbKPRFjsKI34YX2CTrF44Gdz:YirYQP5rC2LJdFpRhBmPRFjvI3nXv44e Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 16.04 KB
MD5 4c73c150db67f15a26e20911c25af336 Copy to Clipboard
SHA1 9871e730456aea4cc2d1f2ae021f1d79144d158e Copy to Clipboard
SHA256 097e21ca90ac6638251d8a6a437ac7525e9c60a3cb47156a8cb02f443e695bdd Copy to Clipboard
SSDeep 384:9454UX1hVw7f4uSup9mLxwPnQyWj7hgP+tajbOiP+hEr:9wRFjw7Q3upAiWN/tajblPgEr Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 17.07 KB
MD5 fbe6795553e45e3df2b5b69ad394f259 Copy to Clipboard
SHA1 d27c811c942c9e4a998bdc4740f069df7b241817 Copy to Clipboard
SHA256 da6def70fa8c386a32662efa86bb26f5a5def7065bdcd34e45180365815cef54 Copy to Clipboard
SSDeep 384:fMinLYl3vhvJOyBtA2y6fMwhVoEeDu41JXr2Hvwus9f9q9p:0iL+hRJBtA2ydwhVo5xJiH7st4P Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.98 KB
MD5 c42de267d483749ec935f2aa53e0fde8 Copy to Clipboard
SHA1 b0a7cad0ddd6ad407dc3414378129651f4573296 Copy to Clipboard
SHA256 1a8224a6a2cd49c8b12d36119000b1e84498d932586ba350fffabf39502bd488 Copy to Clipboard
SSDeep 384:EZMZrImSjDhoZm1iQUL2xL7AI6jYp02rMySh9YovENcy6beiX:d4jDho4IzHjG0yCXrXT Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.43 KB
MD5 6565f6657ba2c56304f2ddf488f1c7e8 Copy to Clipboard
SHA1 627c841f4189c1ee034d5a77da486d232ef958da Copy to Clipboard
SHA256 b20bfa81f2c19ed49cf899869ea293fc34b9376ada3bd6cee5151cf2dc798e7d Copy to Clipboard
SSDeep 96:zz0YZlsbBDY2VRDNCldEdfbnyUXWNFZah63LAnZ3ynv3T:3nZliY8C2fbnz8wEAnZ3yvT Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.12 KB
MD5 b631ca91574b46fca6ca917959b96148 Copy to Clipboard
SHA1 797ce6074fb625ecc8bff2b92c675985eb2ed58b Copy to Clipboard
SHA256 371f7337c6c674cc73bca829a24ff589cde050e8da547a7ba17ef85b17323ad0 Copy to Clipboard
SSDeep 96:5EejPGJIXlyuFGQr9D+dztQ7RMhezxdwOWMd+0S:5VjvV/FG+YztwRXxdz+0S Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 11.61 KB
MD5 f7cdcadb269c96ca659ff785404f3d61 Copy to Clipboard
SHA1 5e2d388687ca907eb5f34a2f7eab9fb69f545004 Copy to Clipboard
SHA256 748d8d61ecbfceebf6122e8c43be3edfcc5645330406c30f2afb3c9071ea61fc Copy to Clipboard
SSDeep 192:dbnYo3OYY1/JTxikQXofqxxelyGhV20Mwvc73rmyFqnhnZEqk4a6U7:dbYoeH/J9ikpLI7mUqnh1I6y Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Malicious
...
»
Mime Type application/x-dosexec
File Size 16.53 KB
MD5 fa50d674a92d070df504be7869f55525 Copy to Clipboard
SHA1 01824e725aca3e4ad67e9c6c79b25fc3a2f96fc6 Copy to Clipboard
SHA256 607396f69a60a69b2d70684467b1cf310610a9258c5e152547c5287efad72088 Copy to Clipboard
SSDeep 384:qBtC49wr/V8agF69SXMHt7FJq9LO2uZxG8zC++z/E:qrCJr/J069aUe9LO28GGYE Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 26.36 KB
MD5 08fcd761efe4bf4affd6bb4316051873 Copy to Clipboard
SHA1 b14b562b05780a1f6ecbd9a6a23604efe32dde2a Copy to Clipboard
SHA256 db1122c2611b480c67858f1e30730ce224aa6ef3ebdc8b550409eb68d7ed3e0e Copy to Clipboard
SSDeep 768:dwI0qE9VROZZFEJx9sh1MOih2f+4r9BJ0gbokYGB7u:d30qeROLFb6Oih2v+wry Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.04 KB
MD5 b5201aa8404871f57f18e79e0a93da6e Copy to Clipboard
SHA1 426c6702e4fed003926f584f3a29c11a0793fa0a Copy to Clipboard
SHA256 1d31300c85e61de97e8f6a038440bdf2710e5888dc11c3f2e1a4b7874e8d59b7 Copy to Clipboard
SSDeep 96:DZ2lccd3A5XkYxQAEcYS6uQ1hG7HN2kexHg+vhE8l1cjv6jHsZrcM9sBfH:QccdcXkAEcYS40zNHexHlnsjeQrcfBfH Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.21 KB
MD5 7e83ac5b2216818c772069134eec2a1a Copy to Clipboard
SHA1 0fc3d350bb796b36d59dffa498c40c939f84d98c Copy to Clipboard
SHA256 3140c07684ed9c2e8477b778fe876e393ac8eb8acb5739f01544ef4f1eb79dc5 Copy to Clipboard
SSDeep 96:HX8Rh1H1ai1AD2qKMCwyxQkIkjNdb3kphYQy/:MRhDb17pwnUzbUzw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08758_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 24.00 KB
MD5 289e61f9283d8e4e872d2c2e783e0937 Copy to Clipboard
SHA1 4e7e8737679972b6657eaa24e23993b76c4e6144 Copy to Clipboard
SHA256 1d874e96527e2ca7fbbe000287eefc3e2050d537e3074d23c7fb99abcde89be4 Copy to Clipboard
SSDeep 384:AI7E762Bu3pnx1rYwkER/2gZBIxB3uIO1F1lQdACuuQJsIjraX6lg:lr2epnMw5R/gxB+fQdAjVF3aig Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 24.43 KB
MD5 a3f48233558675121c6e9114d1faa423 Copy to Clipboard
SHA1 77468e3eea0454454c1eb3caa39bc62c70caaac4 Copy to Clipboard
SHA256 4e920e14336ed3824ff23e3102afcd3f01f26468b4e04ab11695a32f25ebf80b Copy to Clipboard
SSDeep 768:tsZqwXSMP+1mPlC+l3hjCiiRmgFyGMac0rO:VwXx+QC+BhiVL9FK Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 47.11 KB
MD5 991aeeaf581f2ce55348522d82ddc3cd Copy to Clipboard
SHA1 c15efe46cb6bac1d39f38d6daa2c6ecfdcfd5e20 Copy to Clipboard
SHA256 6835dd23abb4ee4c5b7040b740298f15c8c04e1b68ba96b6f49c4c5b9d458dbc Copy to Clipboard
SSDeep 768:YAypAgFzQ/wp4SFwXpCv4NZxVb//YsMcqxEX6LBbrRXM71TP7AXXsG5J07Hj0XJ:YAGLp4SqXpCvQ7b//YsbqOXaBbrhM71E Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 39.50 KB
MD5 88b988decd88b7b61a787cbb5bf5c119 Copy to Clipboard
SHA1 0cd66b31659a94b3c7656fd6edfb8ef231a430b7 Copy to Clipboard
SHA256 bc5a520b01e7eb4796518ba8253a2225f718f8e2cfee6bf2021f37141caeca94 Copy to Clipboard
SSDeep 768:DwfTMBrLaRjt3YUWidaAVdhfKJJFQps2GvXuzFX7zMW3Fr/WYf0h0E40:yw5yJIUWidLDfKrFQpsduprzZFrOYc3 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.43 KB
MD5 12a4e5696d42cda917184707ce8d43bd Copy to Clipboard
SHA1 d68f448e1e3b003e4fbc128f4f162cadd3648fa9 Copy to Clipboard
SHA256 41454bf17f5ebdcc7f0e6bed776ea374e869e6af71dca1f6034fd48e35d143ef Copy to Clipboard
SSDeep 192:bfZ4J3Oj/M5SjDg42Gjl8lfPXUYd5hWT9VKSnTKZPVjr1ST5mlmw/BglELoncRiU:C9OjaGj+9rW97nTWVjrU53WLobFZy Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 20.31 KB
MD5 f2f5c7065f36858e8ff3d604eb1ed18d Copy to Clipboard
SHA1 2ffce0b7f18be4325e446b9040f9731f1019e8d2 Copy to Clipboard
SHA256 e637b5133d94312ffd9a1d434f244e21e744fdd658a1d8ddf7f77de146c366df Copy to Clipboard
SSDeep 384:zs6SgaupSS8kFYt2r3xus+K7Yp8OhTDdgMUSFJr37wILUU27oT3XuMKAwHcjSnlx:z3SgxpSS83ebYp8yesJrLwI/2m3XXKAw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.01 KB
MD5 d3665a4bb3b74d07a9b18db3c74bdb30 Copy to Clipboard
SHA1 c08f285d69e1c9596ee0338f274c33c91b6814d6 Copy to Clipboard
SHA256 a484a1eba438afb1fbee35d85b3dc5a114e7eae3d074a1782aec120f90dfc173 Copy to Clipboard
SSDeep 192:g1gr5DTRYrHmH9I/+CPBl5VSxzkpwLvjCr4M+:sCDyrHou+CJl5VSq6LverG Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 46.90 KB
MD5 2cc00577aeb7a7cf6f25429f2fd1fe83 Copy to Clipboard
SHA1 31c438c7bf6a56ab404adf0633d68942fa422544 Copy to Clipboard
SHA256 8166ea330e226f34b2a0da5a13d3d57d41b41fa0a448604ac05fbfee4d728298 Copy to Clipboard
SSDeep 768:h53R2pQOjC0JqHBSAgZthAY2FQQ8tNJ42Lh2KhnJqTcy5iftJWiujRDE3cG:h72COjqgZIY2Fz63hnJqTV5kiiGw3cG Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 19.95 KB
MD5 23d5fad6d10c5a88364e4e8a7e2c23b7 Copy to Clipboard
SHA1 3f80aa5091587d62875d2bdecf2aad0144f1547d Copy to Clipboard
SHA256 0eb43673dff7eee347e6eb3d59d7ae30ae459c0b094141d412f884a686e5672e Copy to Clipboard
SSDeep 384:yV2s/XbVhrW/49ObdkD/VdVJjpGZ3L7UIZJ6KNdgBgjUOnvYgKSASE3:o2WX3Q49OGD//DoZ3L7UAJ6EdoLS2 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 20.21 KB
MD5 1b4d283a1842c2be29a8be8ccde9899e Copy to Clipboard
SHA1 4b4f023cd3b51836c5caf30ef2b6bdf48d9fc92b Copy to Clipboard
SHA256 16b5f80d92436ede494631092eb9c40108dbb75eb434d7e528186d9d88bd8d75 Copy to Clipboard
SSDeep 384:voE390zHCEsZ4k/rhQQng6pBDImP0o4FEQOoMowSHgq/XILp1tL5:vR90ziZZ4kzfgKDImP0huByhHtXIHB5 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.61 KB
MD5 b7016e80d7e3fe96c356a8712725cec5 Copy to Clipboard
SHA1 39056768ca0440793dbe40d45b2f400bff58d51d Copy to Clipboard
SHA256 09dcbaa5df4a575df7eb136f7300373089b0e7e42d7f5e1b08910dd7ad40358f Copy to Clipboard
SSDeep 384:PoeEYZgU0F4kXZz9eIFH7Jy4lMb1U1YNiA:PoeEYZAJeic4lMBlt Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.71 KB
MD5 2847df689c36634594693e82ee40396f Copy to Clipboard
SHA1 3601bfcad3aedc54a2277cefc15790bbc5e7fcbd Copy to Clipboard
SHA256 7d303e90c2427432527f0b7881cff2108c44d54e6e6861876a0424824bb27769 Copy to Clipboard
SSDeep 192:N4bOJjYAAHkvyERjQMbhYT0sm1ZHC3MxoeYBy+c5FBE:N4b6YjHOyE9bW0sm15KeWc3E Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.81 KB
MD5 38e2b06500816178f537296f64783c45 Copy to Clipboard
SHA1 f521f344a0b3a0a413c3865d60d8becf91a5693b Copy to Clipboard
SHA256 786edfbd700f6c3736c59586979fa2fd31467c1451821ff9a1d07e3552cad690 Copy to Clipboard
SSDeep 192:Tz2nqLbciCrs663/saRuSdSV79WBwIYIoHg9RKSnmGuZ:f2qLhCrs33/slvQBzoHgTnRuZ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.39 KB
MD5 cd3c4271a97ff925aa63d78cbed300cc Copy to Clipboard
SHA1 ae3f9b6143afad38064bcd09c453bc4a3c0f0600 Copy to Clipboard
SHA256 0bda03b9288cfb27399d8aa599181fc067bdd97030dc450f0837b15ad6f6649b Copy to Clipboard
SSDeep 384:3tmfbSX7/X9OyK1xNxXe5N976ncrsmWpncdPPIEqp7SZ:9v/XzKbNxXMNyYngp7E Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 18.12 KB
MD5 00f1eb723ee4ee7cb61545faeed16ce5 Copy to Clipboard
SHA1 e481d7cc39647228274b53bb69dc49d6929ab428 Copy to Clipboard
SHA256 68e82db1b3a1f0d9d711986dfb559c086349df0d77ea7b4350b2c210dc270b8a Copy to Clipboard
SSDeep 384:zlD6Xn68vEjKIXJExHrCZY6qcFPjaNMcguC0a974NT6ofHLB+/C3qqgm7v:zl+fvicHMVNaCuCb0NT6E+6aq7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 11.04 KB
MD5 429a93f610f949e62b43b1312a09b0f6 Copy to Clipboard
SHA1 384917ab82cee4a48f74af4c0dcba6cd54bd3671 Copy to Clipboard
SHA256 25b2b192dc64d8ed17fa24a2298c4d67a9d8afa2fcdf63881907bc8219244c0b Copy to Clipboard
SSDeep 192:x7e7UCvOWkTXE7XInBOvGFPfP2bSioXt5QrB+kYrsynCfZNPZ0BdvaHqjdl:x4UCrkYXInGOPtcd+kyCffPZsdCHq7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.46 KB
MD5 7d10290da099095991538a70bc32ac12 Copy to Clipboard
SHA1 e899f0808d2e57f219997feeeae5de120075f4bf Copy to Clipboard
SHA256 98df51fd011a6f10b5be4dfc42e911f4b46444d981f080caf05a4468024a6cae Copy to Clipboard
SSDeep 384:cmff9WiHGs7J61UUVaPhkB6bQ+1xw8hiCrld3B:JMivg6I6pb1rd Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.82 KB
MD5 ed263a6183d2f293af7be4e50d567c78 Copy to Clipboard
SHA1 7588b6c0f5d7eb62dc58966ed6e3e9240af3f92f Copy to Clipboard
SHA256 f80a050090dcff9f0b7bd4b6d6c355e2d23a0f7334d94c5a8758500504e08806 Copy to Clipboard
SSDeep 192:4jlvIfhI/lzC7p18adoJdGi7OL+jk19GWl+iZH3V4ORkeaIb5dA7X4k/gV:gvcbLpqdGiSL+s9GkldxfTAj4b Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.92 KB
MD5 3fd721dc953ff964e8409e8f9dabd88b Copy to Clipboard
SHA1 ad407dc6ac6d39b264aeb481b037a2faff15e4e1 Copy to Clipboard
SHA256 184fe22ebc8511604d6f38868cf7ac562c12b3a1c1f31392b839ca7ec5ed7215 Copy to Clipboard
SSDeep 192:/+BaPVW/sZpq0koXd8eg4QKC0ATDk3JrtBpKc/QBE21:/+pcq6XO4tC0H3DCE21 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 13.43 KB
MD5 467a6ff396226559dd55d62a589dd36f Copy to Clipboard
SHA1 579ab6713c0ff1e81232914dc37320f87b47ac1e Copy to Clipboard
SHA256 ec7fa4940ee6eb2a0dde520662b0715c921eeb1565dcd7ee7ecc1888f6196ad3 Copy to Clipboard
SSDeep 192:IZS/dJt4X1wWR7qbEtEGSEbnSYdAYsd9JgdG7auNsmqpmJQgbLFmK4twlSl+wgLi:IgSFNqJEbnAbd9OwtselfBQjgL0CYbP/ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.11 KB
MD5 293ce219ec0dcc2d56a40917670776dd Copy to Clipboard
SHA1 572d315211eb2de572f107b0725321563a5ffeab Copy to Clipboard
SHA256 2ecccb32f3575aeb481544fdb591c3c715447cee6e19b5e5b2f67d317868dfeb Copy to Clipboard
SSDeep 24:USjIPDA5wrFKHsXmJa7bmFoiskiG9akdDA6Jf:LgA5wrpX8cbQoi2GX Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.15 KB
MD5 df00c0b0737558e1a295bb81b1c2ba14 Copy to Clipboard
SHA1 1ecfcb692f32f3b37c355cd1bf001d867abff665 Copy to Clipboard
SHA256 e79da26f87cdc107a00adbe00a20235b4e25931cf196656f09c5797f0e7b55b0 Copy to Clipboard
SSDeep 192:/F9Epp+GqVYks3CcaCC3mfg9kdrzsNnek1DHaYb0WEebd6WyCZKQ:/F9qDqY/hCEPskqD6YIWZbd/7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.67 KB
MD5 fab9b4f97ccbf7afb32bfa13012171e7 Copy to Clipboard
SHA1 4e246aa5bf041122efa716ef4e0b94ea9694f898 Copy to Clipboard
SHA256 f5d75ed211238ea1722a583f60642028405bb142a59a67fbc7c2d8428e4e3eeb Copy to Clipboard
SSDeep 48:qP9pbIC6wy8xqmkh1b83CyIi9brPD0Za4wi7:qPnb4IqECyJ7rs Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.71 KB
MD5 24a900e363a2d35f1fb348f815c8d59c Copy to Clipboard
SHA1 c959e3fa8ef7ed5a7f337f54015a9fe23eda33ce Copy to Clipboard
SHA256 252c243e0fdc4eb3c1ffbe53d971feccfd6b592c1e0d6ecbd2d018c25d0bf57e Copy to Clipboard
SSDeep 48:rSOk+erf/le1Jcfjb/dCdurTY4TxAw4XzY:mt+KlCdMTDIzY Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.14 KB
MD5 c3dc8d0fbd1c063bda2117d08f47139f Copy to Clipboard
SHA1 bbf320c6d89bd9f0b632d82c9b490e8269915694 Copy to Clipboard
SHA256 d2454554c90e68c1ef8c2af1a6e7dd99bd7074447040b501564fabc0966ce64f Copy to Clipboard
SSDeep 96:wsNRcer4eG41DmnuPh1K7ZbOhevoLia+C5szAfbvfLEkGdsFEW:wsbj4V41ctOsdGaz4rfHG6KW Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00195_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.12 KB
MD5 67bb4afd1485f7a0ffd548181bf6c023 Copy to Clipboard
SHA1 09822a1b115e38fa640db6e793fb40e3e8387f5a Copy to Clipboard
SHA256 04b908897beaf0a3b116c585f7afb90495005ce004fc6cc4a7a3685078e35da5 Copy to Clipboard
SSDeep 192:+HWCxuzxZUAJeSPnFhAXUGgZGlsGay6obOt840BwW6y1KQcDap:+jxujXJ7nFhyUGTsGCSd4jy1Kd4 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00234_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.32 KB
MD5 6df0acda51bcab80f328c36714f87575 Copy to Clipboard
SHA1 475546fe892f165dd92d765e14627a2303663f50 Copy to Clipboard
SHA256 91ba429c3a4c86b73f0504daabe9b6fdcc67b73d35d12018c280f51dcfae6ec0 Copy to Clipboard
SSDeep 192:bsW3iYWgDrwIR2KWKthFL9alO1eYVc6NVRAUA89zZ/J9qZbf:bL3zDANKt7L9alOweNVeUbzZ7g Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.23 KB
MD5 aff8983982084ef59faaac16f0664836 Copy to Clipboard
SHA1 d42d4d4a4a0ee3b804ab6c0389295219c785e561 Copy to Clipboard
SHA256 d3fbd9350617b1bb7813297abe0be5061ef34fe5bb5417e0561a993257b0c5ac Copy to Clipboard
SSDeep 24:/BIP2WE2nfUq4NvhdZ4pqYPtDyYy2JoV+4QCwxbrXZk6Jf:/bWE2m5bdYwIPx Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00247_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.34 KB
MD5 46e19158a8854e916bb6c2a82cb0b540 Copy to Clipboard
SHA1 110a4a1cbd703481561293e8316804a24b1004cd Copy to Clipboard
SHA256 058c192c57832534737f8552eecfd9cc3a1d1d44e30ac0caed60fbbd8d57e981 Copy to Clipboard
SSDeep 384:Uta5bj0oPxr5mkJacp90COAy1LMXY0y4UfqJqN85FT5/:yaRjlJsk99byUtJtFT5/ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.75 KB
MD5 07ac297ae37eff93c3a284a0877685fd Copy to Clipboard
SHA1 635d90bbb13951f5cfa2ae8a7df5c9723755e3ac Copy to Clipboard
SHA256 5da6b72ff3064bdaecac61b7f7365b16ad1a651ba17e924163f0ee9f85b24da9 Copy to Clipboard
SSDeep 48:PP+FBnffE0MK0vot4zVUbLQzvm9PsUeUkTQE:PmFx0Kbt4zVxs9exJ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.84 KB
MD5 30117db6a7ae1cadb94cea67ba4d4c7e Copy to Clipboard
SHA1 5c776765500592ba679e3f8e233f70df558e1e7b Copy to Clipboard
SHA256 bfefae17047f2f6858dc4dbc3dfced250e53f341ad75bf6b799d333c75e724ce Copy to Clipboard
SSDeep 96:MSKkIj6x7RWPAEPdDgJk4xIqQbpyT5U/8+LDxXylHpYa7c:MSKxMFWPAyGQ9yT5+xXyPH7c Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.92 KB
MD5 bbe62882117761343e820f84d88ac06d Copy to Clipboard
SHA1 fca87e398a894855aec58574ac0f119a56b10243 Copy to Clipboard
SHA256 33ad540fd565dd7bb3ddbdace529fe9f1eb03d024bbbeda297d6e0251c07b2df Copy to Clipboard
SSDeep 192:TawMKr1/a3UIfzjNikoQtfTaBE4WfoRkopcQOpahjp04cwA4JjfEXxIjeaexV1G4:Taw3KU6ZUk2cQPVA4Jj8XxEhesuu8 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Logs\Setup.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 68.24 KB
MD5 9e79fbe7fea45ed187fa19ee0606d8d4 Copy to Clipboard
SHA1 d862896ad99778f3ac45457af49de1b4695faa59 Copy to Clipboard
SHA256 1d4db42c09de75623b924ae8a7f5879e995bc6fba9d66b2736541cacfb6de689 Copy to Clipboard
SSDeep 1536:Oe/cPmcj4prdYGsgq+02jo4qMyk7YWgrV8IaVFatEiNSwTWSKpd:lcP145dRq+00o4quKrdlEiFzud Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.93 KB
MD5 7f03fd9a2a7560adceb84367598a536b Copy to Clipboard
SHA1 9eea24b21562ebfc4977241298b459b09cf2ae8e Copy to Clipboard
SHA256 18e733862c859696cd49d19997b3077bf6790fec432ecf30f3fa665e0b7ad601 Copy to Clipboard
SSDeep 48:IkudokB9QNpEIW9cseo9/30gsQsQPAk0R1Nid4Dv:YokB9OpEIW9c1o9caxPWR1NJ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Malicious
...
»
Mime Type application/x-dosexec
File Size 2.73 KB
MD5 f7f1706eb815e80f26f8ac25d47c518a Copy to Clipboard
SHA1 c4110708aa70bba8a1a8dc847291c8008edb986b Copy to Clipboard
SHA256 052eb8a5c875ea43cf669acec740d46aee2c4c070d8c3137dd772007bd106e4b Copy to Clipboard
SSDeep 48:tEDtw8/WXU0Y3NDJlO4ePLHnDZK+Ue9SROLWa5VLawyKm6C0bw3bd2gWYltS2:tEDC8uEHlJlO/jDM+UmSROyaLmWm61VS Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.90 KB
MD5 d6b5dc05b742103ce9380d65a0bdf1c5 Copy to Clipboard
SHA1 a069c77be44c3d46d4fe1058a8f8e1120681fe4a Copy to Clipboard
SHA256 ecdfee597881de30b42e6d25da17b2d4eb0afe7d0b945fc0324033cf044ecfd8 Copy to Clipboard
SSDeep 48:49PFMqjr/0tK65v6HA9O4oml/35P1a/kKeUm+Ejz6i:4v9PsKfA99nl/psSFPH Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.86 KB
MD5 8a66b0aa32cf7cbe62babb4fcf668ed2 Copy to Clipboard
SHA1 84083ea7b97d26db6a20a38d8ba6ac4d32840abe Copy to Clipboard
SHA256 dcba9d74075b7062cc7737c65fbaa021367245e44023f5e5502ae70581da332b Copy to Clipboard
SSDeep 96:D3jQ9G7dCO6qgveqfhlKkqjxsOp9Q+BHlJzrQKnnw47r+j8N7ewnPVX2hHiXe8Qt:DT2QdCOkJZPssOg+HlJzP7Cjk7lNXkpt Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.82 KB
MD5 24a114ab95ffabb3aa868d79ef8b31ba Copy to Clipboard
SHA1 b4cf481eee58f5cd53d76a356c10d1d586164bac Copy to Clipboard
SHA256 69ac692597635adda45dbffed37d600fbb946bad3fc1e441a9634a824ab542f9 Copy to Clipboard
SSDeep 48:/BwWAtrp4ndIy95dGIItSsqPjKnUAQ4Veh86VFB7Mov80n80i3X:/RneyAIIt8KjQ8ehaovbeX Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00242_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.17 KB
MD5 e263bb249eddba2b4b9d5183430ea3a1 Copy to Clipboard
SHA1 5da87f4d7f23c0dddb2d44b1d22420020cf6e4c4 Copy to Clipboard
SHA256 aa29781561c46bb92b18f8e228ac11fc33ffb8461c5b89d3e4e8717b5f63d8e0 Copy to Clipboard
SSDeep 96:70OLxfz4O/ullUqBNPiuqteNr7pL59jeJolz:oSxolKSNzqteNZ7jk0z Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.18 KB
MD5 0c5d4e62186388a1b067ec3d9ad7793c Copy to Clipboard
SHA1 ca8b4df4d53412a61ed2c0ee099a8e9c478d441a Copy to Clipboard
SHA256 021531ec69c4e62110b76ddf1bf75ac7c11cb77efaf8075fe239a58ec1b25f9a Copy to Clipboard
SSDeep 96:S29nF++WuXBgmXMMzYvQR8HXc2wBPadpBXZa6RYEhp/I:DZWu5XMEB8M2wBSXBXZZRYO/I Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.93 KB
MD5 77f42174fe4706896dfae58ab08de5f4 Copy to Clipboard
SHA1 268ccff1c8ce427075e4471834276fee3ed8e19d Copy to Clipboard
SHA256 0f921d5ff7177ff424ba58969c017a51ebd4c094e0952e713b180c0fbfa205a9 Copy to Clipboard
SSDeep 96:DAaC/b6pGiCdIwWUju6iFg7rxC418dBNANlG:VCDdLdIeUO7E41MANlG Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.31 KB
MD5 656fddcc27149e69fbcb350cbee38b0a Copy to Clipboard
SHA1 1a5a3c8c3f46518154ed8ef4e6ce9f6005d7820d Copy to Clipboard
SHA256 78cd15b774809ff0023e732aa5a906a3bcc1e13c576395e9c537f9838226995f Copy to Clipboard
SSDeep 96:fjeIQkSFYGQXM2g0p89oamMW+HewIi0v9s+CWxLos1XTa:relFRQcH0p89BmFkZ0C4xLos8 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.03 KB
MD5 0493aef69feee59d542f86791d287c3c Copy to Clipboard
SHA1 bf2d92e64c41b601ac3b92e79662d9f9aa8be7dd Copy to Clipboard
SHA256 d47026c4843b66cf5a453b3e64577111008f9bc65e25d58991404e7b730c8e00 Copy to Clipboard
SSDeep 24:OLiEzpyegwvuZ9gKj0toiwXQCyTktcMa8+Df36Jf:OWEzsPwM9Lwt6AJIta8+D0 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Logs\Security.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.07 MB
MD5 ca18219c1c095d7ed5a2826933039404 Copy to Clipboard
SHA1 7b990742897b7cb392e2ebbc4b9a462ea618ad13 Copy to Clipboard
SHA256 4c4899597dda9428e4b9a1cfedb99088b13bcccf75d55ce9563b1b3ca64bcdcf Copy to Clipboard
SSDeep 24576:dfBgauUmG7GfiP5EXpCfYs4w9mL7a4OzNRlWewH4uAr:waupJs4KmfhOzflWewYf Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Logs\System.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.07 MB
MD5 2722eaf199265d913aef67f1210b7a51 Copy to Clipboard
SHA1 9c201bc256ba1f51fc8fb3adb9e471e437a4aa6c Copy to Clipboard
SHA256 7a6106fcc5353cbb786abbfd79ce76a90519424187b0d917f4a063ff143f8466 Copy to Clipboard
SSDeep 24576:8LxiN3BaMD12wHSVkB+PH51rO96MlfvIRt7P3XUn:8L0RaMDUwHlYvfrX7PUn Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.39 KB
MD5 a23b8aa3b4510775263843b75bec0818 Copy to Clipboard
SHA1 03b86ebf2b60e8933cd8be95a2d395f15a44cc04 Copy to Clipboard
SHA256 aa26e04c92eb3a4fb9bdca68afd3783d8f153f2e91a93ee12d6efb2a8444bd1f Copy to Clipboard
SSDeep 96:dPx7zU7V9INEcuFDJtjK46AWeGgPrmFfMWKXBkyNnYSA3RwlSO96exsBEQok:j7zUBKNgVtjK4VPTDCSAWlSrRZ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.43 KB
MD5 7c13fcdc5b24c4f521b3ec08c7b78c7e Copy to Clipboard
SHA1 637dc310e29bd264c0327f7a3ddc62e3e6844ff3 Copy to Clipboard
SHA256 2a5966126407f56d562669e7bc1d0d63c14ebc1f1458241411cd62ec6dbb2157 Copy to Clipboard
SSDeep 192:6biv5iSyAxfvMvhsbeM3ODictKhkubiLWMtpRES/5J8A9ERzzXAY/k51XiV:6b8nfUJIB2icZbLJGzQYQ1XiV Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 26.65 KB
MD5 78c2fdc047b9d179ad5f0d58e55a434a Copy to Clipboard
SHA1 c558a9269e4b8e42bb5d27f5c756e1f83d9b200a Copy to Clipboard
SHA256 21cb17b184e4cf36bd1f42dcbed0cf227fb28bd69a2753af9b34717b3c20ef88 Copy to Clipboard
SSDeep 384:OHEJHjPeVF5cetj/WaxzeYiQlrZ2b8ZMWHwZJJdqWnZA8r4AVFAveLtl3KM11Ud6:JJHjy5vtj/x1rZedZ8olmdUZ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.07 KB
MD5 a8a9e85f0127ffc3cad1ac7d16bf86b3 Copy to Clipboard
SHA1 74113c9cc41dd0af9a824224d7da0f00ee92d45a Copy to Clipboard
SHA256 0d994a8f27f3a50c5d7092cc990e586db10feeb3139bc7d0f1b1db70258548f4 Copy to Clipboard
SSDeep 96:K5J1TI1p96c75DnOcuMRxGAqXXzBwO2ATtwqlF2oxSih+ddyQcVDbGhaB5FsL:6nTsXL7REAqXjWOzwqXLDu6VDbGsFsL Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 9.61 KB
MD5 d39487db88d231c72f611516b3c1a762 Copy to Clipboard
SHA1 69f56699f385f8148dce061c2279115eaf9ce978 Copy to Clipboard
SHA256 284ecc66d10c2c52af6e476b4ddf8a9d203083085ec34e65103bf412469e466a Copy to Clipboard
SSDeep 192:hriUzlPsjOiC7fNn2uQDMxs6oNqAf8V6loaaiTq+2YhMAP9:liUpEy5hnxsY6loViWdIV9 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 15.86 KB
MD5 d414765b7eb7d4991ee89c3c9cf4cd0b Copy to Clipboard
SHA1 7d850ff7acc68bc83a880de211c1f9f3df1de606 Copy to Clipboard
SHA256 2815aafe4b8fc8244d9b06e0a9d567114b29252dc3784eaaa4e7ba14bb3af414 Copy to Clipboard
SSDeep 384:PXQ/snzQ44D+33cUWQzrI/a2AVakCVhtgesOK64ZoGYEY2RgV:fQ/Wx4y3si3b2AV8IOKRZoGYErRA Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 13.03 KB
MD5 20d7a0eba336966eac31f3486b4ebbb9 Copy to Clipboard
SHA1 8b04f714c97eda9b27b95b7c2e23bee1d989d21e Copy to Clipboard
SHA256 f269ec1a61b30c4b5acddd294f74190b115a34c8bb0d91e1ae38217d83129785 Copy to Clipboard
SSDeep 192:UqUlEahLj9+/ze8nOY7yGFkqzO43m/A/ePRvxfcIi0ZcuJZeVWdTyq:UqUllhLJ+4YWgkqb3mzR5RNR4q Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.54 KB
MD5 7b1e0797c883efcd4b653097f1406f17 Copy to Clipboard
SHA1 3c7d99d883f0f4e80942e12ad52430ea4c9cc671 Copy to Clipboard
SHA256 c32b733a74a530fcb7f15dbf28a4945bc210f785369659b2616e0cc06bb7b870 Copy to Clipboard
SSDeep 96:vV18K03oZ5kktVqc6AtFk5js92yzjLRA82ONLwIulf0SEHfh/pRA:/LuyypAtgYMyzje7dTqSGNpa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 6.36 KB
MD5 df32bdc678feb0cb88136b1da7ccf16e Copy to Clipboard
SHA1 8a586208fa402710fd40b2b36522169af7e34f57 Copy to Clipboard
SHA256 711270847d447fdae648f9bacddf1c9438795970c5e09c40982964648066d146 Copy to Clipboard
SSDeep 96:2L3so+pI090D0bmBsX7GOkdcPfJkO78pISrh1at4WrkhPrQYW/7i96X:kgpI0iYbm0GTOanh1aCukNr4m96X Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 19.26 KB
MD5 bf73c6f538f5f4872fd4ca788b409a4f Copy to Clipboard
SHA1 10307c78b993613b3dfe016890accdbe81c4e666 Copy to Clipboard
SHA256 8bc943cb6ef99fedef5996cce0f1776f8f40d4ead8fa11c3f436f07c3beebc69 Copy to Clipboard
SSDeep 384:ug+Ko9WlWrzvQKn8tB4fclfhUmexG+Fr6lafMJW:jSWlWrzIXtB4iZfvEhb Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 11.46 KB
MD5 c1e0119fecae50a6c6bf0f97514e3e63 Copy to Clipboard
SHA1 a685d2b7fc24035b8398c94aca6dd83045601cfd Copy to Clipboard
SHA256 7409aab84f5e57f8348f114ba7aa06d80bd40ad52082eb27e34db8a1d7d57d38 Copy to Clipboard
SSDeep 192:oCAVVuwe44q2R34XxaBwau2lHOXORCaCNvzHZxlZq8GwqKd:ZAVV8Tq214XJScORCZqD2d Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.50 KB
MD5 2624f469124b5ab74250de7a1574b982 Copy to Clipboard
SHA1 742ccbc8911b56972e1ea250a299d657b4c13db5 Copy to Clipboard
SHA256 9f4bde6c1a1dfa6e30a6258ef44713e4b8f5c601b0affb79dbe594895bcd0904 Copy to Clipboard
SSDeep 96:c7EiPShNgIo2ghYnYCco5QkJWp0cqrCefEqjGs2:c4iahN3ghYYTo5zXcq14 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 28.56 KB
MD5 c022f4f51b826476668200500ed8eb6b Copy to Clipboard
SHA1 53c40cf79ea1b55de245d844661e853af25be32b Copy to Clipboard
SHA256 3c91399e878c4a381b5682fab60538a6352c8193bed838e89978c425f8184290 Copy to Clipboard
SSDeep 768:iUzBeUBGYXJcs86InlvRTuXjgJ7SetRf3eOH:i4BeUZD86QRTuzgJ7PTmOH Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 2373fd09521f5a01e57da9ae98799276 Copy to Clipboard
SHA1 d523131e5d0016bcc6d209464bfb4e6443014abb Copy to Clipboard
SHA256 644e3d271a3c0d269ca62ac8dd11d4fd63a0c1149e4bfa7e543baa71fec8d5b5 Copy to Clipboard
SSDeep 24:Eb+R7LvtQK5Spr2ImXpAjTTMF10M+3WDWsHuxDNSse1CLkSKFJ4TwDfJ6Jf:Eb+R/CfZmXKIFXy+6xDte1CYSs4me Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.03 KB
MD5 4c906456e2a29f112f4941c4c1f40e61 Copy to Clipboard
SHA1 f5e62b127b07cd496231c524c1aec7fe33b43b02 Copy to Clipboard
SHA256 5355d841b4b9d67603ef928a9674ab8f60ad0014121e15c8723b5f670f29fd0f Copy to Clipboard
SSDeep 192:dC6TkfuykuxFbg/KEgtTdl/R+tkjYnEzcrpn4vKLc:dMRnfRzkE6pnWKI Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.56 KB
MD5 7dd6b463b4dc0641fec10e797b06b651 Copy to Clipboard
SHA1 1bae47849d985e6a9d0b100508b32835995f50cb Copy to Clipboard
SHA256 e6dea424f048db158b3a6d88d4bf7f1e111a79f72162cfdf77d6e4ed67c787e1 Copy to Clipboard
SSDeep 48:yJhkHlOCsKis6PgnLAAymSLIUOmP8lrLqFJKtgDfG+uTDpXWCWrc+qSJWC/vH4Lg:ycRZLIgncAytI77YiQLcurc+qnC/v0rs Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.26 KB
MD5 92972fc6514695fbddecd146e1c8c2b5 Copy to Clipboard
SHA1 4df2c088c13a08f9ce8f80c78a2992850d731f9f Copy to Clipboard
SHA256 79b5778abc3054d40c27a590d2c03dbf7ed3c9eb4c81cc19fe8a6bfb5a9108bf Copy to Clipboard
SSDeep 24:nirkAQAEEAVnEKWVsLXcTBhsQf4o88efE742gN/z5vo+gvPFao6Jf:nirkTEAVnE7cMTLsQgXfbpz5DV Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.36 KB
MD5 364720cd8f5783c7f6dbd9032f0860cf Copy to Clipboard
SHA1 8e42321272095c125f74a3a2024f67fa91dd7caa Copy to Clipboard
SHA256 85ee35323479403665178fd65fbc9ed9f7d576392e3c8c333f051f5a73a24916 Copy to Clipboard
SSDeep 48:SxkM2plm3I/FJ1gQc2CrmEUCkWx0A5F1io1afKlvi19CkVl1QLy9vsUq:gkM2Hm36PLcRrmEDkWxr1ieaciP1Qqq Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 27.15 KB
MD5 e3e9ab112af56529ab444e0e5f43b26f Copy to Clipboard
SHA1 13e8c9216443eb134fb9fbd0d1c4a1af9989f199 Copy to Clipboard
SHA256 b8ecaa8e6244ebea9a9da3595f5a331507d931815268badaeef7b36a8f6ae1b5 Copy to Clipboard
SSDeep 768:BzCfXsPsOaTJY9ewGNSbPcJZ0U6PhgUZwVfNZ4g:BefsrUJYZGNSbPcJZ0U65difIg Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.65 KB
MD5 63a71e17949802931df836a387207cf9 Copy to Clipboard
SHA1 58ffa752baf0b29ca886911ea1063742504bcae0 Copy to Clipboard
SHA256 96b09136c0f091704dd8368d631a3e68848e46b9ee8b43570217511e32c7490b Copy to Clipboard
SSDeep 48:ZlYjebVrutPLyLvq7ZwrJm93h91cl3BwGw/:TYjexdo2t+3hMw5 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.40 KB
MD5 33af3e6cc1409304fa370307c7a418ac Copy to Clipboard
SHA1 45c1edc6ef0533e682d8b9178e5e6628131e2b3a Copy to Clipboard
SHA256 6bc5722cd932468aaf1eb7bd8c50cf422a4bf9076eb45e2594f418a998665cf3 Copy to Clipboard
SSDeep 192:tOYgsWMEajoRGQIeeF2XDdB10n5F+wXcMM:Rc8QFeF2zJ8QwM Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.11 KB
MD5 f1d44e86544008a41465e9283ecc9f2e Copy to Clipboard
SHA1 a02cd659866f6148910119a416e075fd0a2cb7dc Copy to Clipboard
SHA256 1117798ecbb6ef2ba6d6852d75ae90baaa72ccb9cdacf1febf3e1446d78bfe0f Copy to Clipboard
SSDeep 96:qlBw9svaCk5vvJHPVLpcoxIMCns4Vf/ZDCiuVpxMo9bXoyZ+bs0h/jilvPecvbJi:GivCkxZBNIDXf/hhujxMo9bYU+bz/WV6 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 12.73 KB
MD5 1f81458221c8f4031b56efe4b9841907 Copy to Clipboard
SHA1 57fb8899a652b40f5c7279b4b010a85f740b8a23 Copy to Clipboard
SHA256 11ef4b43086c7595c4aaa3603be5122f4304b1a94839388b9e5a78a5e5c5b722 Copy to Clipboard
SSDeep 384:In+0fcwGhlw0NH9UGMYjgZSh5/nb0rYLhb2VkX:utGE0NNMYOuDvLhb2u Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.28 KB
MD5 49966a92172a7130ea88869f4efc7e89 Copy to Clipboard
SHA1 78a5413d404214bdd161cbeffee32836e3df5e14 Copy to Clipboard
SHA256 ffed55c4420f4bfcf9d25f42cca059ca0f55b2b4b9e2404a9e3cdc10f21a3439 Copy to Clipboard
SSDeep 48:VB7EQ4y39luhpTPVq1DTxmzG8Y/ScdpofR5bIwuIABOV2rcH5agZ47N2LsZsPh2x:VWTjhpTN83J/qHHRKOVacH5O2Ls2XZy Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.79 KB
MD5 91c04b31252604c3cb89a54a23f7ef88 Copy to Clipboard
SHA1 6d52e478babfce1c1158c08aa7fb1043e5da9b62 Copy to Clipboard
SHA256 f7883a31903f11ec08ac57de3d1ff8f3d4cf59ee38bea342f7bef7224cb70b6e Copy to Clipboard
SSDeep 48:JT96WqkwQ23LZsibPvq9Y2alUmF59AXZbHLlyfk:JQv338sJD9KbrlEk Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 648ae24e306748211c362d1fddce6ca5 Copy to Clipboard
SHA1 a78c2fca127c24bc24f2a042fe71ad2b808bbac1 Copy to Clipboard
SHA256 d82fd4eabf00640bca63b3256328c71484c44306e41c13c240f77a95799bf153 Copy to Clipboard
SSDeep 24:YwnsL0/vU0B/fuBS4XYq1DJf3aPQrFfg0SMppk4aPQcXC7zsDTDoPIFa6Jf:YJI3MBS4XYq1Ff3aIrNSMfk4a/XCfafh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.25 KB
MD5 22aa961615ca1f1ac19129c51e4e9685 Copy to Clipboard
SHA1 ce353dfe6060dcb5e3c1fa753168643ca4935791 Copy to Clipboard
SHA256 1a841bd090fc38a1173ec5d3dd961ada73854257e9dd1ef6f52d2b4a7165134e Copy to Clipboard
SSDeep 48:GKQiczN1tConR1oEHWuNiQZmhwExWFkwco6ftXUJFxUjHe:lAN1tCoDHWuMBhwp6FkJrUC Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.68 KB
MD5 974b76883d1d40fbdcf9ad67ce569ad5 Copy to Clipboard
SHA1 69b9d1fa434b2917fb2fdb1216369068f5d12b9b Copy to Clipboard
SHA256 0e6150ba5054da3f848ad5bed8b0446fee400699577a2243146b923d25763f85 Copy to Clipboard
SSDeep 96:skKGM6Gv3mun9/Gh+qc/Or4xF4fXUZ1zVxLTlnh:shtv3mPhVcPxZB7Hph Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.67 KB
MD5 f0ca365a1136ce751580ec01b55a6e64 Copy to Clipboard
SHA1 44dbcc4ef236895df5a8411ac72514eac2330c78 Copy to Clipboard
SHA256 8f3fa2d8f55dda7fc6e0d26c58f0a3ef673898342367f282106ecb8efa52cf5e Copy to Clipboard
SSDeep 48:zehj1icZVDmK6bo8Bhh+MEpN0u2DAg/ON4eG3FXaDyQ55N0zHfQbMJFR87Mw+:iRdD369hhPANED3ONW3taDy6NcfQgJF/ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 1.87 KB
MD5 70da08bd0c7a69833111c8ceaa51485c Copy to Clipboard
SHA1 35a141b715fcf7157578df983b100d0777699bf4 Copy to Clipboard
SHA256 96ee29da47ed8255d3b19985494a9e7d33734345f549a74e16fdb95d214f431a Copy to Clipboard
SSDeep 48:lNjrtoo5lxh96w5oMirRjQbZUlS/T8Zoc5xf:Pjhooj8/5o/QZoc5xf Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream32.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 387.92 KB
MD5 97b561779bc6044446975b9c5b7d33eb Copy to Clipboard
SHA1 6f8aa61d15f1ff8a96ee734d520f6a851c0c3e46 Copy to Clipboard
SHA256 da2ccee76d354c24c3e72b848c1d0a004e25e791942b803896887b7962d73505 Copy to Clipboard
SSDeep 12288:0OlczLaBmH+TaeXbtEBF627M4Q62qaFCWa5S:UGmeWeBEB57wTBaw Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.92 KB
MD5 28f713017ddaab9145957a48e4b356f0 Copy to Clipboard
SHA1 9d5254c8e04c006983815856aa620e755c96d96c Copy to Clipboard
SHA256 60a99e2f547a9794883e1ed668d8d57e7d3678e7283f9327b3d51c1d4c5d1d95 Copy to Clipboard
SSDeep 96:eEyoUsRWzqWc/hLdZITdReErdb+HrkuSZEOIgoTpKPWOWq2ypbBF7:eoXRWuWOLyXesdbswzZEk6pKJn7 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.95 KB
MD5 aa6bf26604601b29e2e77bf118897363 Copy to Clipboard
SHA1 70eeef65f8e00e54c31d5714c9ed18611b4db9b1 Copy to Clipboard
SHA256 a9e160559a381e03734b16ff3da5bc0d0156c50ab30e70f341c3e611a66a8163 Copy to Clipboard
SSDeep 96:VmdwaRQZgiNG2WVMomAio3MyE/z85gj5DTtNCJ4:4wHZPN9WVti5yq86jvsJ4 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.62 KB
MD5 1509a3614c753c26c3479e87785a8e66 Copy to Clipboard
SHA1 f609ce3fed1f53f7895eaa6cd469238ae379b8cf Copy to Clipboard
SHA256 113434b6d3cdeaa5abfc30066fc650c4e3a817a080c16409e0fe625d06d75700 Copy to Clipboard
SSDeep 48:EMnOYHLxyglzCEtPG7AIMSUSccB3QYuwayauYfzZwvHx8v1tqGC8JmfA5r7c:HnhLTLFcAIxUSRBYwapuYfzZEx8vHfef Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.90 KB
MD5 52a2eea3074b46868493609df4c9006d Copy to Clipboard
SHA1 5cd88b69ab4272d6bb63e879c526ae0ef3f9d751 Copy to Clipboard
SHA256 2ea1724e6c21ee20bb6c400bc1a6468e2902194178a1843249482fe681b63ee0 Copy to Clipboard
SSDeep 48:u2uTs0xzpyddMipURuUV/NTlttHjh5JMexwjxm4/4bQashpoSy7oNDD9q:uRTlpyLMiqRu2ltfvMe+jOts7NNvE Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 7.25 KB
MD5 0a8ec07117a13ad5fc2c5a567a9a39b2 Copy to Clipboard
SHA1 0564bab58240dd11f9ad05203707d742f2d6733e Copy to Clipboard
SHA256 ce445f97cad90ee8cc341b1a97835979c2a54b3f142e425e88e018c870a188ee Copy to Clipboard
SSDeep 192:KqBCP9Pcwo+lvKnKkQLHl2aJSxLlgx7mxy2GPhg:Kq4VPcwo+lvhRp2dzgpJPu Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Malicious
...
»
Mime Type application/x-dosexec
File Size 1.92 KB
MD5 0eaf69d5c1fa8e16d598fa3ae8715d06 Copy to Clipboard
SHA1 75e2f90e7ffe70d438451cd8d484b9c7ad9f3b77 Copy to Clipboard
SHA256 6f23a9f51c51d830eefc5fd97d0beeccb36fb2e3b8f46fb6253a8558d77e5a01 Copy to Clipboard
SSDeep 24:5AVIQWPRV1vPsgC/fh+uSPhrWBR2YSE0P3ThWZUe0hfTJwvLxtZ/oNGQnpoXVo7T:5eWPRzKfhG9WBQHE0L8ae0rmTxTbQpTH Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 14.89 KB
MD5 bd09b8586508128ad8de4ab155f3c657 Copy to Clipboard
SHA1 4de2d57d40ce5466e448ef678d629114a9999bd4 Copy to Clipboard
SHA256 710064009e6c483e49dead11e7902b0700e6865cf2c1fd4c81f557ddfd741224 Copy to Clipboard
SSDeep 384:7yYxjfcrp0LKzEkeSs2wHerEH4RtYqhgG0VfV1j3vVTm:7yYtupHn0He9tzQv1jZm Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.07 KB
MD5 4045cfce3c45a4d5dc4de6749dfcc3c0 Copy to Clipboard
SHA1 9996bb9606d36ab4d7b2060a4081342fc420e3bd Copy to Clipboard
SHA256 b8a1618815ef17f876e19db3b7fd91d56ba878a744055c8b211944d4bcda4682 Copy to Clipboard
SSDeep 48:auqSbgw2sJXF3FnpT7/EJpP+fgLTf8Zajda3XagYbeTpiClX:anYJ13Fnp3/EJMfgfzsYciClX Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.09 KB
MD5 fe5c63f32a99a03cd40facd9c88a5727 Copy to Clipboard
SHA1 b2a1c47178b172d59a9e237f19349e72a758a3b1 Copy to Clipboard
SHA256 a9e98079e7cd26af1eee8b5893ef200baf9505efa1ff1d20b76fd47f6b457106 Copy to Clipboard
SSDeep 96:WLYmykAJKaQ7rLNFdnxw6Baftot4YsM7Eq7gjm:WTSJKXVxv1rpENa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.68 KB
MD5 53fc9f08a6a18d3c7764a560eba3ae0b Copy to Clipboard
SHA1 b01cb21317bdfd3cb8d60fd94c981b0d178d827d Copy to Clipboard
SHA256 31a694cabedfc4bf078174c0971d7aa78a59c25d938c6bdd9eb225a23223fe90 Copy to Clipboard
SSDeep 96:yhliLhr1emJKMw8i0hpXkmjLZLIzlhE5G389wvS+Kbm7j74SWydJhURpB+:aWhr1LKA+mjLlIs59mQm37pWyZURpB+ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.53 KB
MD5 0df13d920b958929edf0d7ea95e0940a Copy to Clipboard
SHA1 04df7d00e0be9559fe6cda2f7bdae3cece69ee8f Copy to Clipboard
SHA256 c49e41f6eb6defe4f27874bffab241a73ba011561856f123aa164c871d48bdec Copy to Clipboard
SSDeep 192:BR0Kqkw9Hf4n1Ez5IKh9EP1kLeYR8koqyVZ+gBkctJJopDx8sLJcH2GltzrDIooZ:BQkw9HGS99EdAe08ko7tJaVpJ1GltzrG Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.37 KB
MD5 2cd9eb077648d082134509e3e00d8fef Copy to Clipboard
SHA1 35fdf366820c7598e1341046f3976ea8f3eee68b Copy to Clipboard
SHA256 c77d8624b86c753ec8f6481a775d8adf2fc58256698324753904c99ee129658f Copy to Clipboard
SSDeep 96:lXwkezbCDpnGTDTinDdafpacSSbiRWU+g5wgvUkyM9wtN6E60YAX:VCCF0DTinRUpMV5+inUbNxHYa Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.71 KB
MD5 d69093d84eb23eea5eda3bf9f5363639 Copy to Clipboard
SHA1 0ae7ba4779288f0cde4a91e8df7a9caeffe12e44 Copy to Clipboard
SHA256 3e0c4d445bba9a09f5d08927d4ed3ed9e608e9f8acf58d73681b181b57497eeb Copy to Clipboard
SSDeep 96:U/8R83aMOKvm/PqWKnOfb1SVo8TPLC4pbV6:P2/m/PqnOGZL7S Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 4.04 KB
MD5 3e09d3d2d1c5561c488bf061d7642309 Copy to Clipboard
SHA1 0c1aab8fa115a9d691953c01298aca51d574ffde Copy to Clipboard
SHA256 45734dadd88e23313dbdf8b33f314de0d033cdcac84a3d9064d3d474c11b7c4f Copy to Clipboard
SSDeep 96:74VH2jukgnWclzWU5f3wsmmax3Gp7XUg+7GnNYk:MH2j+nRldGsO3S7kg+7GNZ Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.45 KB
MD5 45ee450dde5d5ae10d7359a867e48b1d Copy to Clipboard
SHA1 e80e3bd62191b6209864db4b1483354b41d983c5 Copy to Clipboard
SHA256 b003b0aeaaf2eee609996188b345251e16216a08077dcdee0d49f372e475f25f Copy to Clipboard
SSDeep 48:MoVCXJX3FXEKq8uK+NYyIRRK8Fpa7OFQbuYCM5i8Kwg0rQCz:v8JHruhKyIRRK+gQQKYX/tH Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.44 KB
MD5 1e9246520b06597f230a1316a83952f4 Copy to Clipboard
SHA1 046d18ec62438561104003945a4292aeb1d03f1b Copy to Clipboard
SHA256 5aefb8a3d544ca8f9f4533bf8b2b9177b9cdaf0bac8709ee51eb5a32a73bd630 Copy to Clipboard
SSDeep 48:+dZeEuDczVyKI69xuhRj8/+cVUBK7GWe+Hv1ddGELb:+dAdYzNI69pmcqBwtHNzrb Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 5.38 KB
MD5 6279bce596a4896662225e60f6fb87fa Copy to Clipboard
SHA1 4febb6de0018ae0c9ba9e58e7d0feb43844e89b6 Copy to Clipboard
SHA256 2afabf10465284694dd5f4246a8741b46268656a7cfab4775da73c58bdd7b764 Copy to Clipboard
SSDeep 96:JVc3/4kGKkADuzxEsGVHyYShlnB5gYs3PHlZr4m76erbMnDzN7aj02vWeUU:13uWx/QHyRhlB57s/HlZr4m7Z6JmY2Oq Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 48.62 KB
MD5 94b903d3363abb1d408633dbda53b048 Copy to Clipboard
SHA1 f4a52a39b288436c66628c65beca6702a08e1409 Copy to Clipboard
SHA256 b02f6d7d25dc126c6ebc467d47ec86b979d411b4ef345ae1890e661f1249e5f6 Copy to Clipboard
SSDeep 768:gLuTvczFpQRVnukfae6YASZxBa0dsqDtTeXs7wvxENAvKFjRwIlIeWr/t:gL8mpQSkfa2VxB16qDt6UaKAv0RwIlID Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 257.96 KB
MD5 cddc0c9c69f1fc09c9e1798f8b9ea22d Copy to Clipboard
SHA1 4d4578ffa3bf2b5c91519b04fc202c5b91bee107 Copy to Clipboard
SHA256 cd5d01be00c72da069ab76751b82b3b064fbaa5fdbfca8267f88b8a3cb2d6c1a Copy to Clipboard
SSDeep 6144:zPCP0ZAr49PNMdQCFeJt/BNbB0yNBMpKR2kidxAsDUIuaeNBEzQ:zCPINaQQUt/BTi2bidx5DUH Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 3.65 KB
MD5 34bfbb902e28e1614233d59236c83289 Copy to Clipboard
SHA1 b9a852e151b2f4f7ec9eeb2609119fa2ea66b42f Copy to Clipboard
SHA256 93a2d4faa9b72aca9fc7caae6191cfaf076f16ae1c03c7b1e232ca71a850a156 Copy to Clipboard
SSDeep 96:InY1HK3L+/ariu5xtuhK3hQN7rIcoUTrz:IiK36/9u3A+hQCTU3z Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 10.32 KB
MD5 399fbf74e1aa5eb179f631b8d8a3a2ac Copy to Clipboard
SHA1 f6198a269dc2a87fead4438c59e3272b459b5162 Copy to Clipboard
SHA256 f8c53290123b741a6c7bd02925b0d4a58ea4850d9525b1f5025fe3589ffffb65 Copy to Clipboard
SSDeep 192:MV6byYEFLLVXqs0BNqsPNnpStAJsA3NIPmGPZdtrHDNqmA2egOthQGwMLlG34jc:w6bHaQs+cs1npS+JsA3yPPRpqmbLGhQp Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 30.64 KB
MD5 5cf09355e0fc5c10094d5c7797ab1e5b Copy to Clipboard
SHA1 918c83b634aa0bc21b5bc809b2f98c24c8dbaf7a Copy to Clipboard
SHA256 7e3dcd0e670840f9492c83465fc27ed7cb02ee3daa5874ba674c7590b41e13a0 Copy to Clipboard
SSDeep 768:yK6jNMN+K0Ns2JEwFRotho3jnIpoATF060zj0/N3EvBSUGO5:cB++KZCEwFRhTnIyA+0/N2B/5 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 8.31 KB
MD5 1818ac8b855b4d0a4a9ecff4d6f63fe3 Copy to Clipboard
SHA1 9553e016b070a48322b7c4828c592a7a6eab1e99 Copy to Clipboard
SHA256 8cbbd6dd4ef409a2e16a1c10d7c8f63fb3cbaf0f0fbb76facfbb8e65924d6349 Copy to Clipboard
SSDeep 192:+JPpmp7CXaTOJwu53ndcZBDVQPCwYtrmkMyg2RwSI7vqqEHtSghxvBvh:+JR0OaTsndmgWiEwSI7vqqEIWJh Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 29.17 KB
MD5 18bf99400dd1448a71f72d9577cf636f Copy to Clipboard
SHA1 f3ab9c79abdf34ddb8ba080147acf0ad8f7a2f83 Copy to Clipboard
SHA256 d56bfe761c0b33f09eba399bfbb9fecc194a058f8cb931f931c49aae4bb4df27 Copy to Clipboard
SSDeep 768:3Dj4Rx+OSECIEz1mWg6MV8BpvhCXkmAZjD8:33IEm6MadC05F8 Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Malicious
...
»
Mime Type application/octet-stream
File Size 2.87 KB
MD5 299dcd2837f2be7ccd6a53d34d89c4df Copy to Clipboard
SHA1 690a99593c9a73065bddd136aa06ba8ddf97ae67 Copy to Clipboard
SHA256 13b43e7cc3a8becfd74c9fee16380857a193cc06b74280648a7c0423815349c8 Copy to Clipboard
SSDeep 48:vcajVpqIE+v4SbPmtQ1xChCX2Xy/Tq/M0kaZdYSjallCoiGG772YWE:vckVpqIT/bYQrC8mIq/CaZdYSmCoiGGf Copy to Clipboard
YARA Matches (1)
»
Rule Name Rule Description Classification Score Actions
DharmaEncryptedFile File encrypted by Dharma Ransomware Ransomware
5/5
...
C:\$Recycle.Bin\S-1-5-18\desktop.ini.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Unknown
...
»
Mime Type application/x-dosexec
File Size 378 bytes
MD5 5a7e844923f2f9b891bc86e42c845bcf Copy to Clipboard
SHA1 8f86babc329c0d6ede04968bdd668e898241a4db Copy to Clipboard
SHA256 bcac1fe024d2daa0f616a5e85f56d62a845a3c7847c147a18388d00292e76578 Copy to Clipboard
SSDeep 6:/hF64CMD0d7dbgE7HSc/1ZdAdvLHvc6WC4qapO1x4xsY2F9p1KEIVApt8o:/hk4RD0LbbGc5AdvLNapsYypJ1 Copy to Clipboard
C:\$GetCurrent\SafeOS\PartnerSetupComplete.cmd.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 852 bytes
MD5 0f080239a8277bb7b3580ca865f23076 Copy to Clipboard
SHA1 3d89e0d6bdfdd2434ec57a37f4845d7f87f8e9cf Copy to Clipboard
SHA256 21738e091a2f52a469f3bc55a89d28c931721272f922909f55295684b40e71fd Copy to Clipboard
SSDeep 24:pkPK6Dx/OkdZ6QBXwNiwgdeheH8lOMSVjRlKx4H:CiFkdZlBXwIwceW8lwV3cI Copy to Clipboard
C:\588bce7c90097ed212\netfx_Core.mzz.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 173.83 MB
MD5 cc75e7bda8993fedfe1a6badcf08dce7 Copy to Clipboard
SHA1 9f7920f930c3874402c2d3c14535e2bdd1fe4eed Copy to Clipboard
SHA256 e104262286e666244be9b1244b073d074f316420ff783d93d664a93ea8c7c99c Copy to Clipboard
SSDeep 196608:GV04YyKSBXZ35w+KBK2KJKDcloT46ooP8ZNoz+hK12RP1O7lT:z4Y7qZ3CwFISoT46ooP8Zyz+hm6Mp Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 422 bytes
MD5 60b52d632aa0a66e14ca695a2276f2e3 Copy to Clipboard
SHA1 ba24c5a6bc187034a046d1bc5234e3743266aad0 Copy to Clipboard
SHA256 e7e2d4d4903aa0196a8e136709e35cb569667cf53e4d294530053e02b7884002 Copy to Clipboard
SSDeep 6:6Zx9gU1YR/7rIht37q4tKip3zlp5nOClJapxR4xsY2F9p1KEIVApt8c:6Zx9rgye4g03H55aQsYypJR Copy to Clipboard
C:\588bce7c90097ed212\netfx_Extended_x86.msi.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 484.27 KB
MD5 39f8ba5b17674448696f0e1e2832bd74 Copy to Clipboard
SHA1 0555a9ba9240031fa80c389d841311b216724396 Copy to Clipboard
SHA256 06536107e97a8c477681bdeb39aa266b00fe7882c1a28b430d25f2e615cb7024 Copy to Clipboard
SSDeep 12288:wlUR8LyY9uh0WuRvdYL2Uo3PSBEe/eRLq:wlUR8L99opSvdYyt6BV Copy to Clipboard
C:\Program Files\Microsoft Office\FileSystemMetadata.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 544 bytes
MD5 6fe659f139888c00a8494c9269dbd16c Copy to Clipboard
SHA1 18fa23eac4e794f3440f3c30bb9e60b3de31ae83 Copy to Clipboard
SHA256 09b1827e8e8679fcad889f4bfc6ae54d37006b8e7367e3d0cda297a2543df038 Copy to Clipboard
SSDeep 12:Hivc0IOl6ndKL8wyT7d3myQyjc1jIRkaWasYypJj:HS7l6ndKLfm8bkR36Jj Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 248.09 KB
MD5 32a8aff51570711db8cc5abe5955f747 Copy to Clipboard
SHA1 12f5611797628c9f43369689377eabe64a62ce85 Copy to Clipboard
SHA256 0eaf22b9c411f2a4e13c181864a6aa002d9bdcfc204daf730628450e8d4686fb Copy to Clipboard
SSDeep 6144:hBg/zCnL9gCpezQH9USlaLgzKjN+uYGlfT9Y065OqJlkn:hIzK1peEvaLgsdzl7a06Dk Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Unknown
...
»
Mime Type application/x-dosexec
File Size 1.54 KB
MD5 fbedac138a66c25a15656e2a1c0ab1a2 Copy to Clipboard
SHA1 dffb964a712cb5af1c54effff71e2f4dd1ff853e Copy to Clipboard
SHA256 9c2563e3996a2f405fe87f8255671eb46a4370b11556f26a31f736079df8de5d Copy to Clipboard
SSDeep 24:xoQwD7bQPo/EhTAle52rpCWrljXxSFQ8oHGHriwzNpFFcBaseb6x06J5n:4DIPcE9AwUphry+2riwzNPaz5n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 2.42 KB
MD5 962abd3e2a3c815bdf425826143d5d02 Copy to Clipboard
SHA1 fb478b79d052883e46120716604774c34c47dca4 Copy to Clipboard
SHA256 36f87ba7a05ee881443c5ff205bbde4ed766274080eac631dec3ce011c5f7347 Copy to Clipboard
SSDeep 48:tgtZrhr+tKcX6aoIJK+oQFjaeDX0wBBUwY4Dk83czphYd2c3vN6ttdn:tgzrhVaRwSjaMEwBBUZ4g83cKtvN6Jn Copy to Clipboard
C:\588bce7c90097ed212\netfx_Extended.mzz.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 41.88 MB
MD5 b790da90d0c6c3db2d470430d72b0adf Copy to Clipboard
SHA1 ba28aaf3de47f780fd99f939c6190d4a029b4166 Copy to Clipboard
SHA256 9079e442aee573d221fa746a405405a2553f60de994e7db863d6eb28640df578 Copy to Clipboard
SSDeep 49152:cpSdqU6tLnvVqSK5G22mDgBOOmeGGiU9Erqkbnt7QTr5+Oc2EI+8dd0ZwTse9QOH:CtZKH2mALErq2nt7rvfI+vZpfQ Copy to Clipboard
C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 2.84 MB
MD5 288613077b2f37df202cee61bd757e7d Copy to Clipboard
SHA1 cc6596b986a7ace7a8ada083492ee566959e5f04 Copy to Clipboard
SHA256 03ecf936b5c7d7987c7c2ce09f3e6760c7a3e21b84af1c84d6bf2dd7a4225b88 Copy to Clipboard
SSDeep 49152:WV4YaGoDumT1r7AdXZy9KU2KUYxs35DKZ3OIKED15FQKKZm7xT4iEe:WV4Yab1PAdXZzKUYxs3pKZnKq5WK4CiA Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 fea4b3ec1687aa7fa71e9bf12b4a93a0 Copy to Clipboard
SHA1 baa7dd3ed85c03734a8b5ef5a16fd603ed9944a1 Copy to Clipboard
SHA256 e226c96f9dc35eca9fbaed363fa1bf3ace793d8d50070d7380cdc167f22f6857 Copy to Clipboard
SSDeep 48:ZywtJ1SzvLAPqNf7tweL3CxCHcxZphFTkagn:ZbnwzvLACnL3Ce2FTwn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 734098eab9c42691e2023a1a93974453 Copy to Clipboard
SHA1 81720816a200d4237778fd00256703fd7734840c Copy to Clipboard
SHA256 205c0d90ebb8da49511a60d78fc871a84e0597dff32ac5f27189b25e4c5cdc5c Copy to Clipboard
SSDeep 48:0RfJKIsuw22LK0lFc8IooIKBlrGrgeSSn:0Rftsuw22JbIxIk5gfSSn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 390.48 KB
MD5 b9af45cda70b0d2cbee42e2c19db2875 Copy to Clipboard
SHA1 b3072a77d6fb862b8da27a5be968523cf6e89b4a Copy to Clipboard
SHA256 865e5461316d67716c85a34c7cfab03bded7f2f0a3078d83cbecb62640797727 Copy to Clipboard
SSDeep 12288:LKOGkXVdQp1hmDZJDMB2D1ALKIeAz3qT1MSDE:LKODspmrDMBC+LEAOR/A Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.73 KB
MD5 27a2b03d74a4e7df2db3861f265f809e Copy to Clipboard
SHA1 d366bd807c6a62a36e52e296255923c97708c8d1 Copy to Clipboard
SHA256 e6d21675a0ec85ed3ba59468764bace8a0980409298620ba80cdb3399e80dadb Copy to Clipboard
SSDeep 48:Xhhoi9xIKbHe+CGveBC8p1d3JrhJCCD2zFRn:XY6IGHjmBPp1RJrhJ2ZRn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 befc61afa65177fbbf0d1b09c6c4228a Copy to Clipboard
SHA1 0dee716b6485ec6fead1df1093060382fe7e844a Copy to Clipboard
SHA256 a1756394fe9894db1cfcad866ea4bcf9bd7af9dd17ad6c694b9632fa54738961 Copy to Clipboard
SSDeep 24:UMFtrP/R56/KDbEBdP8IK66veRdN9vH6ggOP10IxNXN1ylHuxR7o7CiShAN36J5n:UQtrP/3ZDQBNa6Ce195P10eiOxR7IJon Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 1216992e27f81c05b3a1d3bb221a6c68 Copy to Clipboard
SHA1 891547e779ac88bb16b6db480a4ebf7861a08e67 Copy to Clipboard
SHA256 8d656005fc08c17a112abd136561a5d88b454ad1dc95f8202cd843cee848926e Copy to Clipboard
SSDeep 24:FpBtnzR3l+l917a+LDZioykx00ecmt+diTtlIL4wncmnZ/S6J5n:7BbV+r1Ek9ALILdxxn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 63.79 KB
MD5 0bb6822ee79185bc4f879132897ee0c7 Copy to Clipboard
SHA1 a9c303d7ca5513a85511c50a7f12882270edb4d9 Copy to Clipboard
SHA256 a197596a1c6171b0f6ec471cf31a899fa33567f3e3970209af8ad3be1ae8cbe0 Copy to Clipboard
SSDeep 1536:ld5Na9PzQ2jqLAdLoDzxL2wAFMTer3OFIqm3+n:lLU9PzUkdLamJSGqmOn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Binary
Unknown
...
»
Mime Type application/x-dosexec
File Size 1.54 KB
MD5 6139bac149524640c622152c30d04c47 Copy to Clipboard
SHA1 5f336714c033e5072a9118fb250cc0b2b759cbb8 Copy to Clipboard
SHA256 451e42dae3eceb9adde116920b177127850a223d3c52073c3151bb390b947fe3 Copy to Clipboard
SSDeep 48:Nw0HW+uP0GyD8VDiUXX+oSY49gI87c70axun:N/W+BGhienSNgJ7vn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 3.98 KB
MD5 81e9302b89e99ad7446f28d6c4bde2eb Copy to Clipboard
SHA1 ff0d9aff14ba92784bb339e7323d6911e24c9ac7 Copy to Clipboard
SHA256 5a5bf1ccbd0516028f4db3fa3b4e7ca9dc4459b17a9bb74e590d4c562237e2d7 Copy to Clipboard
SSDeep 96:CqASnK+g4IU3tEBd5PKDda5xdvzA6+zaUe+eun:fASnK+gWAd5SDdcxFUNzaUYun Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 2.82 MB
MD5 f6aac0edfc33b59e9bef5caf93e31cd7 Copy to Clipboard
SHA1 9129500f5b217a87668b6ab24f0bbf0f7dd4fd41 Copy to Clipboard
SHA256 140aa9effdfa8050d99853e3968e40a309502eb66a049e7bb29dfd535effca96 Copy to Clipboard
SSDeep 12288:HKz27uxO22G4MickTwrJEOl1DmnERNJOFC05cCENm8SjroPC0PtRwma55yw+LIEn:qFxUjMicedOlEmYP6Ch8gwPW55ywS3 Copy to Clipboard
C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 c4fc658eaa20f7ef27020e86d04fe954 Copy to Clipboard
SHA1 c7d747c54567d60bb193710d80919ad05bf9581f Copy to Clipboard
SHA256 830221597acb3f30e161128a2733ff3c7d014319d9113005a6b95515be3eda08 Copy to Clipboard
SSDeep 1536:L/EDz3YlBNDgNi0lPHtNys/9RB94mSyly96Ant2mTyQCkF4XiaQ:DGEBNB0lPNNys/9Ronys6+t2YyZw4yp Copy to Clipboard
C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 4af4a558d043f203d5609eba98ac8bda Copy to Clipboard
SHA1 2bfff9e175ede2df9577ce6f4298442f929e5ba1 Copy to Clipboard
SHA256 772108eb80e21881e795a9350bf8d84e469affe0bf92972e484267d01c40e209 Copy to Clipboard
SSDeep 1536:jD93k49otSx6zxMCxV0eEcEj8HSTYSSOcUSPUqH008fMNxs:jX9KS89MS0ehrypptqU+zNO Copy to Clipboard
C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 ab238e560f33b393921dccfd7046fcbb Copy to Clipboard
SHA1 f5989d389cfbb115d1e5bd14471569c65eb526d0 Copy to Clipboard
SHA256 8c1757f834bd96d5f5997383d20e209f96c3db3e66179167b79e3267daab169c Copy to Clipboard
SSDeep 1536:TFu9yaokn4k5UR/iNrqv5oX9yfQYPpln4ggdtlng:TBz65U/ilcP5gNg Copy to Clipboard
C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 bda0c436fdabac07e00f98b2174cd367 Copy to Clipboard
SHA1 034cf7a913ac3e11399e19b180d87e6ef12078a0 Copy to Clipboard
SHA256 def4d3cc920c7db9afd1b40b744cd33e4eb5c153d183645e390ea2439423d1a9 Copy to Clipboard
SSDeep 1536:+O08jd/F7r40HUFV4e2vVhM+AcQ2LvC9uk49JP37GPZbhz:z08R97sWUS9hM/cQCK9uHPP3Qphz Copy to Clipboard
C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 4d00e260c294028cbc29803b85a8ff88 Copy to Clipboard
SHA1 40ca698875153811fcb63a00344b49ff2a0d2d2b Copy to Clipboard
SHA256 0bb949ae790a42e0a99edd3a4c7de04e13e6ef249844bd651895304470c3bd26 Copy to Clipboard
SSDeep 1536:Lhd32BE8vavHBEe73fMgCeRYPlFELri9PSlcCRb4CUzY:Tx86Hr73nCVlFEiMlcUsCiY Copy to Clipboard
C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.35 KB
MD5 39fe02849ada0c6c4c31d465163674a6 Copy to Clipboard
SHA1 4f5fc27de95919448ace84adba484a96fca98c1b Copy to Clipboard
SHA256 d94baf369fe5bc9ab37db70f608686d00d8bcbad98e383aa552dbf39f20315ad Copy to Clipboard
SSDeep 1536:Sn5Qp9ekTUNPRSxHbbyrTFq9sv1+crh7a8E+YTIMruBwF:Sn5QfRoNUVOrjB96+3Mr0E Copy to Clipboard
C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 2.82 MB
MD5 ca412a814b38be9d4a1429b9122ad592 Copy to Clipboard
SHA1 5418722b5634cfb91c54239f93e9ec3a602e8de7 Copy to Clipboard
SHA256 2b327c6a2cd2dbf2ae869a8715d41b44fa457d55fcf04d2754c75592d52415d7 Copy to Clipboard
SSDeep 24576:J67HhqkB8m6pn3NbHi/nHvqSZUisyVEVXUXEm:JivSn9bC/niss7aEm Copy to Clipboard
C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 204a05481aedb49e2b5909e992c503f4 Copy to Clipboard
SHA1 4be73bbe04d51e8f2bc69dc9064d65adfcf6a68a Copy to Clipboard
SHA256 c3fcf25977827c676d860581cd9b6ce56ad613341ade15f7f67378f4c24a4684 Copy to Clipboard
SSDeep 1536:5VuvbT3wUHHZL/rPsYxjiosDz9OLdlqDELBP81IXm0WQPrlQlBjCUq0:5svXRnZLjVxj+ZO/sELeI20WCQlBjCK Copy to Clipboard
C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.34 KB
MD5 cba95d1734b2fb0ad294e6061104deda Copy to Clipboard
SHA1 4932f64161077fb614405c069267731702c05996 Copy to Clipboard
SHA256 7f52826063114f2e045e4a228db8f871ade02bdef23fa442214f51677ef27603 Copy to Clipboard
SSDeep 1536:qWzGwzylW72JK44m/liQs78WUrqJO/5BmNKfG5O92EGA/kE:qczylGCN4m/liQsgjU/NcG5OgOkE Copy to Clipboard
C:\Logs\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 0d9b554465572654400cc26078db8d92 Copy to Clipboard
SHA1 5abb3e15ac3962c8da9558f5acd9840f8f10a0d7 Copy to Clipboard
SHA256 cb7e8704ac3965e234781efb6acdf359daec28bab9157b37d3051acaadedc587 Copy to Clipboard
SSDeep 768:uP8ae3OnpJ+ttGUz8EJy5RJmiPlbyNMFqI7/SqN0cGaJ4ou5vVXUtjphAZaxQWlS:Kken3+9DIJmiNRFqkN05lJvxmVlThKmu Copy to Clipboard
C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 a24d85533e975a870baf4b3b1c1384c5 Copy to Clipboard
SHA1 30856704bd9c1a515627362a4003928e537a37d0 Copy to Clipboard
SHA256 2dfa28309e0038bd9cc2dc186c07113f02aeb25e1990cf8044365d435aee4a75 Copy to Clipboard
SSDeep 1536:yzxyRGiPGYQpuuGyTaw075Yus2siZql3RrdMnKAPGk94iEC2:ySPGYQpfGyTa/quXClhOKo94iEC2 Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 788f6190ad95fcf5db1b7fe53751d469 Copy to Clipboard
SHA1 09c7c4fd21985cf94b48ffabc8ded47209853a24 Copy to Clipboard
SHA256 ef52dc31a8c5c6598877f56d1717218fa94cdfb0149bc4dd4324c94af65a2bf4 Copy to Clipboard
SSDeep 1536:ozsVr/TRrib/dVsZGWVUex5GnCBthiDHVg7Pwp7qO2I5hWd2FmYg6Qrg:molNZ7biDHC7ih2I5hW8rgZg Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 9625902486c33b6bd311b07c90d310fb Copy to Clipboard
SHA1 bdad9e17928ad3f8f677f8c136cf81b21c79912f Copy to Clipboard
SHA256 3fd5b84f5081e961679a1c54f22b6e5a26921f5c75763901011757f9f395240c Copy to Clipboard
SSDeep 1536:bfC7uTwtarerSrmNqsehgPzcTUXR18K+oF0Rkh79Y:+y5mIsehwzNAK3kkd9Y Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 e3bbfc407bcf56602f8dfa72c95b6c9f Copy to Clipboard
SHA1 d85160e3b5acf18137e2cf9f3c2a06a8d152b321 Copy to Clipboard
SHA256 ab021b29e0a4998c7abb9d89db3ac7391b709a469b49bee2aa8882da4dafede2 Copy to Clipboard
SSDeep 1536:u2i9wA1GD1I3VoL+0ZIiOGTZ59wazMdAwUIBrofJiwWi+YraaB3glGO:sOAwKaL+0ZgG9crof0wW1aB3NO Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 0acda38446e6c07ece5957a9cdb8c984 Copy to Clipboard
SHA1 e67400cb3e3f22d42fbca6ca25ee1694850a2afb Copy to Clipboard
SHA256 5f4f39bc150ba6b1e5ac2b2f1d119dfff2fbaad70112e789d14ae0b6f91d8cf6 Copy to Clipboard
SSDeep 768:LoJosgoprYKtMxoJY5CBTjFooC966mgm6Mq95WR+ulDfYOZNw76lg/qR4YB3u1b2:LorP9tHYUTvqapjBowBe48n0pzqy Copy to Clipboard
C:\Logs\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 197d8594ea3b1b4eda9086190e66bbc0 Copy to Clipboard
SHA1 45e5af3cfbba29c3d2ed2299760904f1114a2c87 Copy to Clipboard
SHA256 fef8e7d297d4a4235739d4c79e894c99a5acf77840f2f7bc8c3f0850834ba742 Copy to Clipboard
SSDeep 1536:e0TZ4jmzvV7KeF8RQZ/lYDEgJYD6LfyuGUm6Xw/d4BPQdtZw:TN4jmzvV7KeF8ulYDEJ+ryuGU3wZDw Copy to Clipboard
C:\Logs\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 407ef0c82c410dfdf15ed8f72824c80c Copy to Clipboard
SHA1 00af981b66f25951dee053560eb08a66e8bc397e Copy to Clipboard
SHA256 796afd1a82113723c281b7f505352aab620522a8e442bd13167e7d18b534d3a2 Copy to Clipboard
SSDeep 1536:QPWDftVv0w4QQjECVynqrGVQSlolP7AtrznzzzoMC/+fSrywUVzB:FD3s7tr4h+AZzzz7C/+6rywUVzB Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.00 MB
MD5 e8c858ac606c493ae48137fbaf32a6a6 Copy to Clipboard
SHA1 b72322156a6df2728a288062bcd95531f7c04a8b Copy to Clipboard
SHA256 9c654adc4fd3ab81286edf4222256ba6ab5cd4482cbcdd95a8ca2180c6c1bd13 Copy to Clipboard
SSDeep 24576:a3HbFnWen5vhMsxzDwOgcpQrBW2n6boJOUHbZ+:a3d5vxzfjOkbK1+ Copy to Clipboard
C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.37 KB
MD5 ffc6e4088ee15daef0e6b40bcff8a4ad Copy to Clipboard
SHA1 de8daf3ee065835a12f080e5794919f69745b70a Copy to Clipboard
SHA256 929213796b23cf035cac985315a9d976e2ef5cd33a5172e7e71c00d0eee29baa Copy to Clipboard
SSDeep 1536:noWUjvIqJM06JGWWSUFv8kAU9pZAMgKFMoa3fIcCG:5UrJMFF8v/9YpKG3vIcP Copy to Clipboard
C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 7643ba1b73e572d0a66a0454b61bba6b Copy to Clipboard
SHA1 a54945fcfab8696be6116ae1c11874ac953a9f4e Copy to Clipboard
SHA256 a38080f0e01554d193324d8973d365d15cb52f9300d6409b18734e9de6cc0336 Copy to Clipboard
SSDeep 1536:wlKURGRfKxnAmTqB9YCW9FO6+ubI0p1xyYqyJAqt6IsWC7HyRNE:wlKmGRfKJxqB9YCyFO69bVplqyP+yzE Copy to Clipboard
C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 8042d6f0bb71fafc78b454268d20f17b Copy to Clipboard
SHA1 da582078afcdcab50d87661e945a61fab1af04e2 Copy to Clipboard
SHA256 5f282a58f171a3a38ffb070501a1d19594f47ab57fb0c0155b368f0c6ea8e8c0 Copy to Clipboard
SSDeep 1536:AUbdSDoa8rZJFNlNaiamVCh9djKzq7YsY3plsI:AUg2drlaXmAfxFY5lsI Copy to Clipboard
C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 0e7b156a3d69f0043ab8b7f7cac07991 Copy to Clipboard
SHA1 15909963ad51cd82e5e5a2e4210ae0456cac4dc3 Copy to Clipboard
SHA256 7a4509965a0be7899f5ed1aeea1e5ed6e087383714baedea0bd147a50f07aff6 Copy to Clipboard
SSDeep 1536:bd7jSv7qfu9ubaKgGb5QALAdO45Z2DmWQbZhgD:pSv2fu9Oal6ZAdN5Z2Dig Copy to Clipboard
C:\Logs\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 fae52ef616eed9cf46a4c4235e421067 Copy to Clipboard
SHA1 2561a66036f70a76c54df964b1123f95db8f319a Copy to Clipboard
SHA256 7e32eec8e0f52216ba7a635df68c5ca7dd99d6cc5f94ee137e555e5fa63b6ad4 Copy to Clipboard
SSDeep 1536:7CA4YiN1bnFAA2KOHyRDxbs6pTjDr9IHJ8Q:79WaA2KOSR1bHThIKQ Copy to Clipboard
C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.00 MB
MD5 683ecf57472c8f5f4c2a8377dc9c78d2 Copy to Clipboard
SHA1 76dda81d57561789153d778073f12ebb0aad4079 Copy to Clipboard
SHA256 e63216e374368ca7e90af04ff1772fb59a5bd206dafc115b5499cf104bbd52b1 Copy to Clipboard
SSDeep 24576:eh/VYF9Qc+leFZu69lTO7jxeMEnLMUSvq0yKIuXSIh7I:eho9+QFZbIYMEnIUSSkkI2 Copy to Clipboard
C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.37 KB
MD5 a988c6845ce7618b732a0527e41dab30 Copy to Clipboard
SHA1 4f36303c9678ebdf6d352dee566a2e158280ed6e Copy to Clipboard
SHA256 7ad0d79df3f7eed461bc18a893931ea10fd80c5100a348f2b56e69aad3be3a7e Copy to Clipboard
SSDeep 1536:gndNzOeJ8sqv1lt1231UFFyNZYJv4TDnGMLZ890PxRzzy8q+5wi:edcJJN8UFFRJv4TDnH189Yx9z8cwi Copy to Clipboard
C:\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 27744f70ef8fe810cf8ffd458044d856 Copy to Clipboard
SHA1 9aad5ae7e8b827744dff610a58860e3318b33e7d Copy to Clipboard
SHA256 bb94aa675c8ff5c58e0b82c3bc54e6ddaab87f806913aa221a83c0e2e5536d3b Copy to Clipboard
SSDeep 1536:I5KZKH9aSUZK8kLg56fPGGqhSG1yfWo0+2uhTFQtGTVwimBpwJPTm:manmSwPGGqEAo0obwp4i Copy to Clipboard
C:\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 1d8c74b11de158cc3cea9ecdd2de1afd Copy to Clipboard
SHA1 cfbfd34aaff9defbe187dd8d8e6f809b4f3b67c7 Copy to Clipboard
SHA256 5171ad5d298a6aa98be271915ac3196ff905c7dd51c504fbbdd80901a210f74b Copy to Clipboard
SSDeep 1536:hhRuKtawSpXoQdIe+V5k6kF8nrqYS3Xy4CwUTKSihEKB+gpO:JtAXxdS+OWY6ytRTFaBQgpO Copy to Clipboard
C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 68.38 KB
MD5 311b3c755e2a0cedb99697221c31a751 Copy to Clipboard
SHA1 90ed1c2c5e9618316e3e6ecfa6b9f807665253eb Copy to Clipboard
SHA256 acb263f724dbbd44af7bcb6d095bee564aac6f1d1c147188da3262a2bcaf9ca2 Copy to Clipboard
SSDeep 1536:KmWuVhZOT2TpGPBhx0YI62QWG6m8JU1jAy9D8XzVWG:KahZQsMVIoL6miUJcXRWG Copy to Clipboard
C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.00 MB
MD5 001700e32c3dfd1aca57b1921f11947a Copy to Clipboard
SHA1 1e5acc4ba73a42b6242e9d5d82753e689f9739f0 Copy to Clipboard
SHA256 faa70d87b3687f6fb6cf0953832c40d06ddc9273f8f44c79fea2c593ff84f178 Copy to Clipboard
SSDeep 24576:FK55j1n9FquD9j1ANGXbJ7P6RIgks5I7I1AQ1W2yJcXXe5:F45j1nvbDvKGLJ65ktyx1Qmw Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 18.47 KB
MD5 b100433d18093b01e6ae1dbc669e7963 Copy to Clipboard
SHA1 8d2e9e092516ad1a70e6eb42d818ebcea910a84b Copy to Clipboard
SHA256 cbfe07c850ebcac6c89f0e48719f8b49c5ddb1ca94214c848c4295bf47969c69 Copy to Clipboard
SSDeep 384:v8zU/VS3yN3J6vxx77uYMfUI62r2Ypl2aIX/kd:v8zU/VSih8zuYcUI62rdp8C Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 18.48 KB
MD5 4163325b8dc0e8d43d696eec37577673 Copy to Clipboard
SHA1 8edcd77a1171ec2f7e4e8cb1b652a9e2a9723c68 Copy to Clipboard
SHA256 f87d01b0eac7e2c822f57d98e846200366ebfc7adc453a097ca147f62f5ab86d Copy to Clipboard
SSDeep 384:ccU28ZiBWTcIdpda3ynyHPUU5JftaAX6C6dgKF3zo5c:cG8YB3IdvAL8U5Jf8VrF3zKc Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 11.63 KB
MD5 cdb3831d285f3f6daaec12a02980e2c7 Copy to Clipboard
SHA1 5e686dc94e764128100c2775de0bbb49b4b29cef Copy to Clipboard
SHA256 0b2c360f72788eb94e6aa9531654651ab87f77a2df521d201315ed8c3c4ae50f Copy to Clipboard
SSDeep 192:a+ALe1hVFdb2FSbG5YpPI5U3CBiWADvjwYObYknujktHXuFD4TeW7IQqX+:aU1J2XJevcODlW7IQqX+ Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 22.97 KB
MD5 7c774c4c7ededa7c4a7120110e824258 Copy to Clipboard
SHA1 f7fd3ff31790507b70db30f79b0f8cf79afc51a8 Copy to Clipboard
SHA256 1c997ae174d2a9cf55f8ffbc8a7cdd897c9b18089c30d22f901835c5616e0cdd Copy to Clipboard
SSDeep 384:1tGMhJF98p2GUWXcvi+lgjzEORPi2SJB967LZnZzagbifRZJe4PgqqeVInw2Mda5:bGcFKpDUWXEiMgjzpNnzaxRneotQ9Mdm Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 20.97 KB
MD5 9fda82a6ab2645766905e41e3809514f Copy to Clipboard
SHA1 cc6e5464d1faec28b28262e6898ab53259204d11 Copy to Clipboard
SHA256 82c47ae8f1d0b3063d471d28a8eae339b77a3ec7886e11863252f027d5b32468 Copy to Clipboard
SSDeep 384:YJpBLowRDu6hpbZ8wJZUrPKcWpDQ7J/JkbyZd7DWzxf0B/dfHs:UppowRDPpl8iUPKczR+m7axf2fHs Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Unknown
...
»
Mime Type -
File Size 3.01 KB
MD5 5f5af1768f04a086a6ba57f11f41dee0 Copy to Clipboard
SHA1 4f7e26ed65d898e820bfb28d0f8a229398aaba15 Copy to Clipboard
SHA256 de8cc6fa897f42346af1733b7c62667b9ef1724d65c367c7346df7c5b8b56644 Copy to Clipboard
SSDeep 48:g+i/weRdaKai6GI4MSCEmOWINiE7Qz3XD6uQKY5s/GTeFViH+lFGYYBeCC59u045:ok4JWINiv6PAeH4FGYFJayLslIvCUxG Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Unknown
...
»
Mime Type -
File Size 37.32 KB
MD5 06bfc40901530c3713885c28fb52d861 Copy to Clipboard
SHA1 1a5674c4bed9115cd7ff6196406b20303052a92f Copy to Clipboard
SHA256 f2c41d3c2802416b2ef54216950b11b0793e34dad1b3c37478cee198144e7e8d Copy to Clipboard
SSDeep 768:LREaxr60IH0mqOZnHDUpRW11UnQjxyFdpAp2a2J9QZkWkLG87Q7j:lEaxr9m0cGIZAdpT1J9skWiG8Qn Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Unknown
...
»
Mime Type -
File Size 1.01 KB
MD5 c8ea47d72651628e9dbeb282f6fd2558 Copy to Clipboard
SHA1 b2fd880aa18ce8edf1ae1412d61dd0198489ae15 Copy to Clipboard
SHA256 00415f3613c43f9e68afa6d19fe98f46df16bceed276251185dd64cd8947d237 Copy to Clipboard
SSDeep 24:65CvV9LsFZMFhJ2X8f3vgmjjHXmTeAlIePQYKIIa6Jf:8CvVdsLMkXOYm2/yeKx Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Unknown
...
»
Mime Type -
File Size 7.89 KB
MD5 6b6bd12bc179a5c187e90832e58575fb Copy to Clipboard
SHA1 bd1dd8ab80cb20a356a0a19ae8703fce51a66b71 Copy to Clipboard
SHA256 af0b4d8b2f1811784703e542b4b29d09db4dfb5b042aa763921ee0f6467b516a Copy to Clipboard
SSDeep 192:FLUGmLwkZV2IGrYykZl2ojxM3aKeK5+HyKUpCx/9:F0MwczrS2eCKUpCxl Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Unknown
...
»
Mime Type -
File Size 39.32 KB
MD5 7636ab85485557f829c32ead4c8472d1 Copy to Clipboard
SHA1 4613f09eff975c7a26d1b254647c6d7fe4edea0a Copy to Clipboard
SHA256 46d69791d6f6d35459c67d585ed0ed2b8d627fb65a0aba26d6fc4cdf81b47a57 Copy to Clipboard
SSDeep 768:/FQnk5DEeAUMc6zeoRheud/XdsHxkyiAj7g+3K6T6uY0CPtDpclw:blDAbpiHudyemfr3nT1Y0CEw Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Unknown
...
»
Mime Type -
File Size 2.61 KB
MD5 b45a4cc35244cf52b1e4d44fdad49c6e Copy to Clipboard
SHA1 fe8be60f0a74b3043d0d586584a8f9132e79df3e Copy to Clipboard
SHA256 4b5cd03229e3987bc394cf6200091c30e8d9e7cdb5e6b5ee25a84cb7092910f4 Copy to Clipboard
SSDeep 48:hvMSFiENb3DcnFG187+ktGhiL/qwtPIyGdwO1+o6adEEl4gWLY/q:WSYG7DYco+kghgTtgyGdDpd9lnS Copy to Clipboard
C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[mrcrypt@cock.li].MGS Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 5.61 MB
MD5 15b829db0ce56125b0af3a6a1b44a452 Copy to Clipboard
SHA1 4a33ebf155151699e470da8c50c4a6d088aa793e Copy to Clipboard
SHA256 bf063ddf650480cd7e79cd2c96285b0b02e4ee4b9472d9961543ed8c89539d84 Copy to Clipboard
SSDeep 98304:Ef0pKGBHTKYzKXH54UuFe1kBpHua/KUKcs3DKVDKP7IzQj92:27GBHTK8KXZ4UuY1kB1iKFKP7I2E Copy to Clipboard
C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 41.97 KB
MD5 2afa3c9495c6180511231eed25289d26 Copy to Clipboard
SHA1 7c95e83a4a99936ba3aec5d11dc5498d85777380 Copy to Clipboard
SHA256 e46623ce86c4e1741faa7353b5544c9bef465fe923182d1c739b99fa3aeffb46 Copy to Clipboard
SSDeep 768:fzKclLkQHvOHxQ93O7aCbNO1HXMZa+buAJmDu0Fxub5Lt6vz0b7MQd:tllaxQ939ChO1KeASu0OdL7IQd Copy to Clipboard
C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 320 bytes
MD5 74dd1523d4b0479a329eec06c3c2257b Copy to Clipboard
SHA1 bfc34face9772d26dc5278e67597e3609de88c44 Copy to Clipboard
SHA256 d98febdcb94b7b227f8c8539c73d569683b3fdbcf42524acecb26bb7ece2fcde Copy to Clipboard
SSDeep 6:N8gw0el1DmRH8lD7g7ywap8A1eo4xsY2F9p1KEIVApt8K:Af1UH8lI7ywar1eZsYypJT Copy to Clipboard
C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 6.14 KB
MD5 478b21067b9cee7b9ec918806018eb19 Copy to Clipboard
SHA1 35147cf17097b135579e98555d857d36041f27f8 Copy to Clipboard
SHA256 3eead9e84affc3a8f0354578505bba7a0a39eb40695f53d0db19fbf8942ffd5d Copy to Clipboard
SSDeep 192:78BKT3dPLEPA9xOMrBtQeP+gSfx8tW2h4MNJEx+t:78q3dPLE490MrXmJu140SO Copy to Clipboard
C:\$GetCurrent\SafeOS\preoobe.cmd.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 314 bytes
MD5 01d3ef0a4da314930d4b856fd40f1dd4 Copy to Clipboard
SHA1 69be31e7c4eb1aa9343b1ab5c4d52557f29f71ba Copy to Clipboard
SHA256 2404f051f6b61d976ae0f496c960284cecbfdf8543df913d8e0a3f416efc167a Copy to Clipboard
SSDeep 6:Y2nwjJOQXLYv+Tl0ncQlSa/1apPd8CZU6+ySLoiRsEK/5mf/3V:Y2nwjAQbVJeka/1alqaUVyERlKxmnV Copy to Clipboard
C:\$GetCurrent\SafeOS\GetCurrentRollback.ini.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 416 bytes
MD5 3283cf948a57c7875cf012584cebf698 Copy to Clipboard
SHA1 5f6dada2517d11da3743357d219e7cb3f89dabe6 Copy to Clipboard
SHA256 b89b9e82e2578976d29ad503b0bae13c441fbb2b774eedd539d1c5a40df080a5 Copy to Clipboard
SSDeep 6:8Wcy2kxzWk6mlgxOKgZAiViMlrqlGUlqD4qapxeVXzJL4xsY2F9p1KEIVApt8a:VcHkpWk0OKgN/laqLa+VjgsYypJj Copy to Clipboard
C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 378 bytes
MD5 c433491ff55cba1f6979c3a6461f21ee Copy to Clipboard
SHA1 8b052060ed7f11537c02b2769bb4254bcfb31d4b Copy to Clipboard
SHA256 814a41ee42356ffb3db6cab9254211647d4d29ce3872a4da30d3bf4cf3a409f5 Copy to Clipboard
SSDeep 6:cfvHtsQKskG6CU544DGT26WC4qapd0ZyO54xsY2F9p1KEIVApt8o:cf/+QKrG6z44DYNaD0ZyOcsYypJ1 Copy to Clipboard
C:\588bce7c90097ed212\netfx_Core_x64.msi.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 2.56 MB
MD5 29c2673ddac37b0fff9b764e96b1ac5d Copy to Clipboard
SHA1 4db8e8d22574d552a5d85aa2614ebc31030cc65e Copy to Clipboard
SHA256 f77cba407efd323bcf444377688cb559697a85576cb1facadc14655a2550c984 Copy to Clipboard
SSDeep 24576:nc+BQbPyxbs4rONS5voMfjhOGxAZmhWNeqKM4on8xcbvekOdl0fi//l:ncxisfQxoMLU8QrGxcDtOdl0K/d Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 4.93 KB
MD5 586cf514045cf72d6d1d38f8855a0ee6 Copy to Clipboard
SHA1 15a9b1b27dc8089d8d98b10d79d8cbd2f841cfba Copy to Clipboard
SHA256 3a811f280c6e0fd1953bf13540304ab7d13f7e802f6c00dc22bdb79f41c19011 Copy to Clipboard
SSDeep 96:WxTqeILvf1dL88jdtzz/eBNBtUQntaonqcxfwAy:QqvTLLXsZtjEVCoAy Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 4.62 KB
MD5 c0b1f6ec2d367acaf5c3eaec99f302ca Copy to Clipboard
SHA1 187a30e87634d38ad123b05d6b0c80d427a52dec Copy to Clipboard
SHA256 4d47a4cf3c23d0962958c0a885bf4080ab2cda24b6f38d0278b0b9ea31114919 Copy to Clipboard
SSDeep 96:rG49/na94+W012sOh+7PC3qzdDz6esQMiUQQFW+ymyj3:rP9P2Fz12sOsK3AxzEYmyj3 Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 4.30 KB
MD5 c3af5e13abbb713c5f85ed2924914c0c Copy to Clipboard
SHA1 881295183696984d7cd8839aa66aa9047d76bd1e Copy to Clipboard
SHA256 12c4fe213a12fdcefdacf9430d2abfd430ffb5cc34db66650a26d9d4141cbf74 Copy to Clipboard
SSDeep 96:ArY29RyyiUkO2kjrI2mKwBvgKV07G8f0EUOE:L2vyyiPjkj82VgoKYXLE Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 404 bytes
MD5 a21884ffe05ab1a350b02219d4b9b7aa Copy to Clipboard
SHA1 a0ae942177c64b7032a1085320eeb345171c1875 Copy to Clipboard
SHA256 42708a264f2725f59eee8e4b35619d68ffb23f59f719c58cd1e28f51cb4e4b4c Copy to Clipboard
SSDeep 6:fijpVV5Z7UMGFkAR3d0hz8AUB/KOciMvnOClJapRpPlNx4xsY2F9p1KEIVApt8W:foVT9Ykk3d0hz8AUlMf5atEsYypJ3 Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 434 bytes
MD5 eed0565d79e007accc932a83654642b2 Copy to Clipboard
SHA1 6f5d1a78d39be80bea62ea97cf8eceb32b5a62f5 Copy to Clipboard
SHA256 5aca2ea6f3636caa3aa1c415a41f4c7e4097fa79aa6e8312fbf3635f46fa39b1 Copy to Clipboard
SSDeep 6:CGWsmhK+5sg2s8NBZAAhi0qYZ8evcp3CDXynOClJap0DcXeo4xsY2F9p1KEIVAp9:9W75sFi/0qYZq30a5am4eZsYypJ9n Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 422 bytes
MD5 7d35a536f5b71288b091d2e78e0a2928 Copy to Clipboard
SHA1 c40ad1b7091244e956a691845cbbb30cd9d52578 Copy to Clipboard
SHA256 ed2e0bc1568d0e84c31f63efe2c079624f51894ac14245e6ae28df431dbee6cc Copy to Clipboard
SSDeep 6:KzETfiZ83hlvQTOjO9X7xUp3CDb5nOClJapjdV6W4xsY2F9p1KEIVApt8c:KzIHzzQXdS30b55afKsYypJR Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 434 bytes
MD5 4a5b3ea8655fe9735ed10763437f5c21 Copy to Clipboard
SHA1 31c5a47cab52b705426e4cbb95f1ab2a490222f7 Copy to Clipboard
SHA256 c0eef44ecd2aa72df9abe18e104fb5c0b902688f61a950969de219e813ec8d92 Copy to Clipboard
SSDeep 6:z7bb4v7Q+rhZHOoga9KJPp0p3zlUnOClJap2H8o4xsY2F9p1KEIVApt8Qln:z7bEL7PN3O5aM6sYypJ9n Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 422 bytes
MD5 4d74cedd93a16ddad814dc5c30aec2cc Copy to Clipboard
SHA1 225c9fb01da094f58f29cd9e080eaf163cc6a693 Copy to Clipboard
SHA256 7aa23b6dc69a51e9173c4ac2b8c99d2f30f12493d41501b43b2c9be300a9e771 Copy to Clipboard
SSDeep 6:c8TttUAkjlQv7LI6yyFMlUip3vT5nOClJap7pqmx4xsY2F9p1KEIVApt8c:c8TrUAL7LEyFMG03vT55aREmUsYypJR Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 418 bytes
MD5 49a21031855d5a57f6f407d2db300e17 Copy to Clipboard
SHA1 0f0f75a0e394344bb1db3f3ee748cb41cb40b0e5 Copy to Clipboard
SHA256 e266e710ffc35c3e3f446ceb18314fc2c2760c4768c6d35eeed3310d55e9839b Copy to Clipboard
SSDeep 6:CKQVFnmr/O0BMe0+hvvp3SnOClJaptiplvj4xsY2F9p1KEIVApt8Qln:fQVFnmr/1ZP33q5aTiLasYypJ9n Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 62.71 KB
MD5 3a958a9b4bdacc6f6ec0ccc9c669b532 Copy to Clipboard
SHA1 c82c8ec72b50a5784bdc5de21a4916eebf178ea6 Copy to Clipboard
SHA256 ce33731a949e04e3a2757e5de9bc84bce0fa1a43a6aba40a042a79c0090be98c Copy to Clipboard
SSDeep 1536:Fn8kySTbo0luLrKxvMYIcOWgm0707LW9NAS3iE:Fn8kbfVlxycq70Wt3iE Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 142.04 KB
MD5 a1e1009c5f7fddb1e25eaa377847d5b2 Copy to Clipboard
SHA1 932eb2563be7f9128410f5e239348c090b93611f Copy to Clipboard
SHA256 b5186c896161081b79be8a57331202bce53fd1d0f8e15906af988990ef4b1f1d Copy to Clipboard
SSDeep 3072:/B9NMRjKPbK8T/HMhOMmHxPrtHrKy9/4afZMMpyYqzxIefYK7:TNMZgK8T/XMSNroTafZkYqVIXK7 Copy to Clipboard
C:\Program Files\Java\jre1.8.0_144\README.txt.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 280 bytes
MD5 19b6bc87c6466ca2b50dedbf4f539232 Copy to Clipboard
SHA1 66e931b21e70f69f3595e12d04e41581a77e5df1 Copy to Clipboard
SHA256 1c444b00d34137ed24f86f5206b67f07ed25e999647930de783d99a1b7b25fca Copy to Clipboard
SSDeep 6:d7ZDG8Yprtqapa4xsY2F9p1KEIVApt8ml:uLRqaJsYypJb Copy to Clipboard
C:\588bce7c90097ed212\netfx_Extended_x64.msi.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 852.27 KB
MD5 c9c9e4206658e1d39b04c8d43165d5f1 Copy to Clipboard
SHA1 afe6e602c3a620e5186545760126ccdbd004b5eb Copy to Clipboard
SHA256 056514ddcd7c256f75b380fe4c7f48e5b826f97aaa5ee374dc097e876f08bf38 Copy to Clipboard
SSDeep 24576:iSrgab5+jmGL1j19sqJqB9UsBelXnxRxPfeE:iSXN+iAvrJqDzBel3xRxXj Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 378.59 KB
MD5 1c42f1d5dd7e5fae455bb21ef6d68a10 Copy to Clipboard
SHA1 0b0ed5f30bf9284a81faec2657f571400f8f8e3f Copy to Clipboard
SHA256 c53211be3f65f92e36d783d759f75a8f086c4ef753b9af302c5c0d6970e9d924 Copy to Clipboard
SSDeep 6144:H+9G/ARbkKsUobcaat23w0nKrB7ZKYerWM8S/O85NIESSikBHxfIUcUK4d25/eVh:Hp/+bkKFfaamqrB7ZKYe+SySHiyKM2Ju Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.81 KB
MD5 924aa993c097fb76d23f3695fd4ecc7f Copy to Clipboard
SHA1 c777f37d7328ade50fe0096b135a9cd800c3cade Copy to Clipboard
SHA256 f6316ccef3f106f78ef5026a8a6583c71549c41ff8f0fb36eba0bfa91e7d7e9a Copy to Clipboard
SSDeep 48:6irygrxsrURXfbaymXcB52C6nT/QlOU3n:1ygrxVRPbaymXcBUC6TolZ3n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 782.42 KB
MD5 b7fd45f079214f48e7d99bbf3c23b57a Copy to Clipboard
SHA1 eb0edb9517c973af5bf3ffe9a7d8ddcbb239cf72 Copy to Clipboard
SHA256 1a7896704ae10d34b46b2d6ff33da3f6a187d8312b1b10d975dac169d25bf395 Copy to Clipboard
SSDeep 24576:uzq1/BPGy6GV9gjbKYk7+byRmddfWCcmR0FCUq2Qly:SqVBGLGV9CKYkBmdwCc804UrF Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 5d612b7800167b5a0e9139e43cc8f8b3 Copy to Clipboard
SHA1 b1a5b204fdab953557b65a33fa12ee26a5799d49 Copy to Clipboard
SHA256 962fd2046d854c6d28a8fa15b4aecef58a72427bea91596e96be46abc3694d90 Copy to Clipboard
SSDeep 24:N5CL6BaPW0BRYv6JPcrqOZgjyV+pC/1fYv66NLLB7QXkBheXE+6J5n:N5JaPWIMcKzUpC/RYyotUMjn Copy to Clipboard
C:\Program Files\Microsoft Office\AppXManifest.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 6.42 MB
MD5 dbe3b34cff76a9fc8731f9615c9ff634 Copy to Clipboard
SHA1 17f08252cb86314b883ba5cfb93d1d0969ed3a01 Copy to Clipboard
SHA256 93cc473ad67dc624b655b14f5630692fa3ef51d5bed6e6f61995ff273eb9a6c6 Copy to Clipboard
SSDeep 24576:54vzz1Y5Zj9Y6AOwaWVNWWHHzRu1k/L9chbUF/Tx7mWqn3gVtiBwGFwRusBwlNSv:5qk3NIX3NIIaIGcp6eCEu0B Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 f9d37a9c8ea144116b5479e7d5004841 Copy to Clipboard
SHA1 2b20a2766a082858fdac66cc7fe7000fa41551ec Copy to Clipboard
SHA256 62c39d11d26926ab2c3c19326a1f2ed1e91650c2187c4acf52260cf3ec4c5fae Copy to Clipboard
SSDeep 24:iwg66XrC830fOgU624mdxbKFREVyUyMfiaPiWZMnlIb5ysHdRzzqVGj/Hcdsh6J5:9+rC8e021REVyMKaPi9nUHddqVGjP4n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 485.20 KB
MD5 0f924490e1384e695eba869a83c4647e Copy to Clipboard
SHA1 b0ebd7bc80004f7b8c071ff0ce241d390b3ca209 Copy to Clipboard
SHA256 b8c81be96d235d52eb128b94fcc1c6c6341bf215edb6ec2ad3a484dbbc5478c6 Copy to Clipboard
SSDeep 12288:f+K33zzHLKXCV9AHJ2rx+/dcgbQFok93KRD6LGR:fn3nr6C42rI/PQFok96s8 Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 19.31 KB
MD5 f4708c2666c512034fa5191b3151237b Copy to Clipboard
SHA1 f9980d339709154c7f675420ac1d0c78288c2095 Copy to Clipboard
SHA256 e425fcf231eedd426aa619b080b23eb9cacf10e78ef0a5be8d9c6451174d1adc Copy to Clipboard
SSDeep 384:RCrvF5zD2XJDwxLVOk2sN68r0jy01V1sExn:R6Z25DOmskJGMyExn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 6733ed91e0310b7a6d6d245739421edf Copy to Clipboard
SHA1 cbc84bd6765817680981d41df45ecd13cc3a80d8 Copy to Clipboard
SHA256 23873a04ef5869cfd7f03ea60b1d60aac1ee3b06bfb7e71ac80b61f72a8f7594 Copy to Clipboard
SSDeep 24:zWyL/miWBERgkAKRphX+tqA6d+fHgWYZw5e+II1G4pvP3Oi3aUhUAF/aznDkF6J5:Qkakvutsd+IWua1NvfOgaUmsazY4n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 6c9cce871c324b9948badf9090b2bd27 Copy to Clipboard
SHA1 beae728942633104a71156d2445c2bab1dcc59ae Copy to Clipboard
SHA256 5785f0852d321dfc0702bca1aecfcd722ccc11fd4c36c42709d540349cc23d5a Copy to Clipboard
SSDeep 48:YBS9vVfB+8aG+0y8RqnW3gYlKxMeOAU1RhMdw93n:gsfI8U0JgYlUMe5ha93n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 2.42 KB
MD5 02301a6f603546b76e3fb46a4b02e379 Copy to Clipboard
SHA1 749a22f765675c5e9868f053ecc6d6ca28241a0e Copy to Clipboard
SHA256 a90fefd208f1939769bfec887df3b5e8e44cfac3ec7e0c352a052c8274ac4221 Copy to Clipboard
SSDeep 48:uzs0fhnRJyOabAy6rlSMZTmdfovvoOll74BGAHp89YKBtQ1n:0VfhnbabhedsAvo8DAHp89T3Q1n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 745.79 KB
MD5 57f1fd889e7135a028575525d6ff2c04 Copy to Clipboard
SHA1 f56de287dcac589fd7b9bd6625813950ecff201f Copy to Clipboard
SHA256 b7ff6dcc5f83a19240a8612f6c16ff2387b10f1b577d5713ff0a2225e5b877ae Copy to Clipboard
SSDeep 12288:IZx0j4FIk1mbMRrN3sZ82vQ7pRXD+YJYFx70JTybwbvyTjo2ILjytQ/m12RWg4+3:91k1mwRrNq7AXXBK30JTybIKTjo2ILGE Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.07 MB
MD5 8a092e00705888f4716d92e1d9294903 Copy to Clipboard
SHA1 701c6a19e3b78255974159f43ea01999dadd24e6 Copy to Clipboard
SHA256 5d051cd89e7a4c128b1f8cf9246ef0193528dbfc845c82abdf60186d320a94ac Copy to Clipboard
SSDeep 24576:z8HQp5Yvs3D4REhvn8qEnIVTNL5Zd7b7g12ThsRy8pmuUPGR:4HRvszCElnVZJ537PgETiyxuaGR Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 364fa1f3a9ad9953d8f2be1bb41e9305 Copy to Clipboard
SHA1 63b28ef462fbc8ec2cd5765d4c72ef14f3288e3d Copy to Clipboard
SHA256 65a61a69ca63db2bb7097ceaecb9bbdec49d9d16d921c3267b0b590eebc76c66 Copy to Clipboard
SSDeep 48:YhY+aLJl+rcI4nNqcAYSpsVMZvZSfTCIZn:YhwmwIsr7WLSfu8n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 335.61 KB
MD5 a74981e104cb52c9fdcb561d544e8a61 Copy to Clipboard
SHA1 1f4ee89c9049d571eb2ae9faf0e445ddbcf23bcd Copy to Clipboard
SHA256 f1b3e6354fd96aa8e83388baf85af44434cea2e5d291efbfa9f66e2068cf1f60 Copy to Clipboard
SSDeep 6144:YYzCNg0NP1AirtYDj/wauyTaaL5k1v6QQ6GKw+f4rrFIAv3Ko83rxwZJn:APFtY3wauyxdi1uKMnFXio8boJ Copy to Clipboard
C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 5.71 MB
MD5 d2d1d848dd1ae0c742198657e0f3912f Copy to Clipboard
SHA1 7a11de8e22e54e04e8b6a0bfdfbff80e46c55e2b Copy to Clipboard
SHA256 7089816127518cb0e24e151025c6728d60a8ab064a68a5f750e51c135ca40be8 Copy to Clipboard
SSDeep 98304:uuEAUjb7BkOKxUKnat45mFe4H5+Ju4JKUYc93iKlOKtljhfPF:e3PBkOK2Knq45mY4H5OMKkKtl9PF Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 211.14 KB
MD5 f0da3df9107a3632b274a005fc20a5d3 Copy to Clipboard
SHA1 a374d441cd9a2c469d256b48f24b06ffba4b2ed8 Copy to Clipboard
SHA256 7f083ee58a6033efe3b3e8f633bf381a730775eccad73d13a5579c7d0b2bbbc9 Copy to Clipboard
SSDeep 6144:WBCxhsApApUR/K/snSc5wTLb9gG0F6xnXw4bBI7cn:WBC9R/K0nScApxn35 Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.89 KB
MD5 5df45af3d4e60fed79e32b7ab0d55465 Copy to Clipboard
SHA1 b805912bc5937ce2457c12e7a5e77c94b27eeb2e Copy to Clipboard
SHA256 975f892f02d80f59b4e5119cb0103f4ff975a9c917f0a3b9d08728caf99e311f Copy to Clipboard
SSDeep 384:DXm2EpZ4kLo6G9tiji3lN41e1RrtzltxeovyKk6n:DXmNlo66suH4U1RrtzltxHqCn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 a30e2308e531d0cdbbbab1d14215c49f Copy to Clipboard
SHA1 bc2d291e9afaf7d381624ae14e42ee8fa800ff93 Copy to Clipboard
SHA256 cd720933f28073388f94d182056d575f52d9f63f4f26dfed8026f3881ad578d5 Copy to Clipboard
SSDeep 24:oTCT00dmhRtvTRmNcguPZPISt4u4nrsMX9DYapZLNwtGlf0RdH6J5n:of0dYAcx54ZrfX9DYanAG90+n Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 fd4787fa8ed472eb85572ca5882aaaeb Copy to Clipboard
SHA1 07f2a7d0427fb0c9def958ea2a8de1dc8f06734e Copy to Clipboard
SHA256 14085ac38ca6cd0af0251b139dd7958f3e0a8fb297be195a884c05e577214314 Copy to Clipboard
SSDeep 24:P429F6YZJxB/yeb2P164UeGACW9Q/H3K1KuC3WKKGpuEpmX75Gqq6J5n:PF6Y3xncUjAQwKf3JKNrHn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 9.33 KB
MD5 ddd2520cbe3ea0d3d9b9d748e53accc8 Copy to Clipboard
SHA1 5a366e3c7ca595c3ea947766dd0a43951c2a8cf1 Copy to Clipboard
SHA256 002754ae411fe8b0f90fe05e8099a5e399b95797b926df5b8dce5bb434452f6a Copy to Clipboard
SSDeep 192:VuDDGQyFNW2GQWiLafb7XNj9ed4It8aAzGhKV1r8ujikbn:VuDDGXa2mfHNj9ed4hOKV1/uEn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 349.29 KB
MD5 e475e8e98d5ce9921357d3578eb4c9d4 Copy to Clipboard
SHA1 545773061822373d470415dfcbef232a73a7b33d Copy to Clipboard
SHA256 3add3ca5ed79f2b992613e6545e983f058e9e348305ab3558f70d66f4c71b11f Copy to Clipboard
SSDeep 6144:Jq+skmGOZKkHWLnABRPxCxA5008SW0MP4ngKH651ixX6ExWfn:Jq+skmRZKkHqABRPxk6Y4gKH65QqEG Copy to Clipboard
C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 2.79 MB
MD5 4fcbc59b7107a600d2226c60f65d6d8f Copy to Clipboard
SHA1 b3788c772727728c7f880315624f7704775d5bc1 Copy to Clipboard
SHA256 13e8552ea5bd9f350ba895ecf3c56abeee37c87aa43dc32a25a34291aa879933 Copy to Clipboard
SSDeep 49152:oJ6tDuv7GuMRau8yuXQFKUYcs3HVKf3rhK3qT6mkZ+xotJkMqtIoZR:oJbGnRau84KUYcs31KfFK3qTrkAxcJZc Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 6fb988fc4aca0d35f845e7c68433021d Copy to Clipboard
SHA1 feaf5134492a736009984f1495ca2b29938d079b Copy to Clipboard
SHA256 bf465e77ddbbcb3e8772014779bb2c6f01f03e871de9a1a3dcf37a1dd521a67d Copy to Clipboard
SSDeep 48:psgKpWE5VGAZAN/UAk/jZNuvZLeZOo+gon:qgKj5k/xUv4vlC+Vn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 2ed4203493374fb82669bb3cf559f6ef Copy to Clipboard
SHA1 060b98823f224db13b21ef292dde26b9368a9715 Copy to Clipboard
SHA256 e729d6005d0b3644b2f78ee70d72ff494611cef38aad52cc672ceabf638b3b26 Copy to Clipboard
SSDeep 24:hMfInRnOwQav1c0UyTc414p1MCnz+7m8KZ2unSU6r+oguoSS+piX6J5n:hMkRnOQtc0HTd14p54KAKSU+opun Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 1f79ef24bd25e9141ddf930803acf60e Copy to Clipboard
SHA1 dabdf92546735f627d6609b69bc3035a84be8d30 Copy to Clipboard
SHA256 f97b4889127653f085fdc583334370391c1271f0aceb2564437317b7395b7005 Copy to Clipboard
SSDeep 24:/AzPCDq5m1JPPAYSiwFOH/5UJVCAI4+xQRLVQmCN9WeFqYz5c0oFDkYKhM9m13RW:/Y8DPPAYSiwFO2zgmCXWxYzfMkpSn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.54 KB
MD5 8758404cb5e7d5e2eee56053762f0d70 Copy to Clipboard
SHA1 fa10a5763772351603f8bffe90d8f043f52d1229 Copy to Clipboard
SHA256 7f3830b23bce9ea0eef0f48e3e76d59472cb63c6dc37f46188c250741afc520b Copy to Clipboard
SSDeep 24:Trc+PCgAiMv95IYj+QLojDD0hMGmq7wzt58NyUXNc6J5n:TMgAiMF5IK+QLoP4m2wz8Pn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 3.61 KB
MD5 3b5e0171bff452654954ab07a2424c2a Copy to Clipboard
SHA1 677aa57e7f69b4d298406ca8d4bbb3aa8143460a Copy to Clipboard
SHA256 8d1b2154fddd14b9e0b46091a35bd50e3e13f95ff034c530b6c6452f33878f12 Copy to Clipboard
SSDeep 96:YIKUXdIs5tIeXW25yJJqV7dDAIYQHJGfXn6ghx+73Cn:eSdaGszqhdDAQpqoCn Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 9.87 KB
MD5 1179c26dfa8c2baaa2b94149153b9056 Copy to Clipboard
SHA1 2a7ed64e7100b45a400888ae83a6c1bd7cc730a9 Copy to Clipboard
SHA256 c8f5b4a8c2bf8919ef004f46880292dc4dba1411d163e64d551e5802aeb8c93d Copy to Clipboard
SSDeep 192:C/hMM36oDNgu11prNKIQGUjYlqoAgFrlS4rnH5/11OQCFA3aqMoHj23Ia/wtEJ4:rFoh1vNKvLklqI51n/oA3abtq3 Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 640 bytes
MD5 62d0799aef125e79b1dd3af864d20e4e Copy to Clipboard
SHA1 dabd857efa0e12ef06e923d8e2a14a543c5772dc Copy to Clipboard
SHA256 9be2adc262a035d17dfd6900e4fb3806daf8f193a09e8d917ba7e953b295b92b Copy to Clipboard
SSDeep 12:8RyN4z88G0mzC/O0FhupQhBGBUdCBTSxjLq6MkaS4sYypJj:Ybz8VG20FYUdCVyqVb6Jj Copy to Clipboard
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 515.90 KB
MD5 cb216d3c13271b4608634929badd2648 Copy to Clipboard
SHA1 2e294b025a807ba136734f4fbd69c9969b8c5441 Copy to Clipboard
SHA256 798402f4121abb83621611eefd483b1dfda5d523f7ac83e4e12dbf46a9dac585 Copy to Clipboard
SSDeep 12288:UBibBog/UNOTAcHfDwcl3rH2Hoidqhb2bdC42VX:FegOOccHfDwgb2H10EdC42VX Copy to Clipboard
C:\BOOTNXT.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 242 bytes
MD5 d055c757809c9ca924c3fea7c7e4c7c1 Copy to Clipboard
SHA1 0e420d710a2cea6813ab0cba6c0f72cfd7540f9a Copy to Clipboard
SHA256 fc150add59479c9d6d1c73a7565ca8b9d277f73f23d8fab713ac7424e7ebd4c1 Copy to Clipboard
SSDeep 6:cKl41apE9yeq8CZU6+ySLoiRsEK/5mf/39:ceIa/iaUVyERlKxmn9 Copy to Clipboard
C:\Logs\Internet Explorer.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.27 KB
MD5 7dd2a3f38ea685bf415fd1aa706f4b90 Copy to Clipboard
SHA1 b30c707620370367d11858d8d4602392c7dc14a3 Copy to Clipboard
SHA256 bc0d51ee654c25f193ddc1bf3b7d7b403cc17b3a6da8d3471e597846c74ec631 Copy to Clipboard
SSDeep 1536:9OU4Tn9WFCASGUJ27YyE+oLOweyAoiGicgDpUxdssMFML:9OU4TcEASBAE+oawVjiG9gDpUvsm Copy to Clipboard
C:\Logs\Key Management Service.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.28 KB
MD5 817047a9b8369b46fa8ce92a8845952b Copy to Clipboard
SHA1 f33ad1a1fde689e33571f5475cab1d28d3ef81f3 Copy to Clipboard
SHA256 b0cd6438fb313800a356f67d5f3c7cb2e46ad802845c471c4395ee029a2d1931 Copy to Clipboard
SSDeep 1536:zdZGYkKzkxiRPK84FDchQk3ebKiaiuQeTLROM2S5zHfJo0M:prYUR2FDcKuLQMpHfJo0M Copy to Clipboard
C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 0c9a98ff804aca626556efb2200f6bf4 Copy to Clipboard
SHA1 15cfa0cbb6e95c766717f15c2517677c5da08c66 Copy to Clipboard
SHA256 b96a32f3406b5057bdd367edda716d7b75d1a59c0780b88fdaf482f79cb26cd7 Copy to Clipboard
SSDeep 1536:FGZjvqCn8X02saQfsXXBWsPaW5R4sNM5BVfmF6+/wfSkk8uO:FGZTqCnM02HusXXBWs6sNiiHFhZO Copy to Clipboard
C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.38 KB
MD5 b1e0b4b9cdc0687ca853b9f833e48429 Copy to Clipboard
SHA1 bbdee63b541b66763c682cf9f98fd9626f3f5522 Copy to Clipboard
SHA256 ab8bcadcaa0d12219792cf7d55e8df7fa8785318a9307eb6e6cee5c28b485355 Copy to Clipboard
SSDeep 1536:lHgisiazgbuuXlhSScgkyIbuy33ESJnvXIQwldlM:l2i9buunfhkDUSBvXIN7lM Copy to Clipboard
C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 07476a8f0aae10bbf28fcc723f0aa93c Copy to Clipboard
SHA1 d180ce354673ff428e3587796871cfe1ecd49a6c Copy to Clipboard
SHA256 eee07999e16417620bbf1c1f521e096971feb4b5252c64d86917f2588ecf24c8 Copy to Clipboard
SSDeep 1536:GyB1uVZonbtUIKYHyQLzydWGY7I3KvtLEIdPnT422QSlkmhtAj:G8uiK/QLizavtLEGn8LQmhte Copy to Clipboard
C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 3d1076f1ffc1a6e37053f1c8555f6856 Copy to Clipboard
SHA1 4ef3818761a916c9c683891963cd1c9333de6485 Copy to Clipboard
SHA256 1cfe1fffbd1121c8eb801b2d8c10e851b43c4d581b28439cb19b68e6d8016507 Copy to Clipboard
SSDeep 1536:L+YQW4sBZ61uWQCykmku4XWDI601NwpJDB/:L/R4sBwCCfmku4RrNwt/ Copy to Clipboard
C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.00 MB
MD5 f9ab04e3605ed4935136c7c1daf2bb98 Copy to Clipboard
SHA1 409bc7f62ab64f0a22096de0df1660ffb68cf715 Copy to Clipboard
SHA256 55a90fc94007a57e45968f72f07a4d71a50de87b78d11d7d0d69904a4213ebcf Copy to Clipboard
SSDeep 24576:kflSnkjnuEPh6LNC8L2wCM9vgPDC0Ep9yVzctV2YDOoBTK:kf8kqEMC87CUiDCvFV2YioBG Copy to Clipboard
C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 2de7b588a2c7cf84cadb8bdb06d73f86 Copy to Clipboard
SHA1 04218bb31ec295f2823411f30bb548b2bd083287 Copy to Clipboard
SHA256 4dff423699d90966bc4eba06a01b28627c1f878ccfae5212963aaf0413483e78 Copy to Clipboard
SSDeep 1536:ZacPOXI2aUw84kCvzWTYSTfEWltL8FCTe2vgILU29fw7i0x2ax/Ib:Zf27K8JTYqf3ltL8FCC3aUOfw7iYwb Copy to Clipboard
C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.07 MB
MD5 29e7a9886d6bba7680044bd3489f4c49 Copy to Clipboard
SHA1 559804c02cd170e9a83604846a8e107154b24f0d Copy to Clipboard
SHA256 4b9298d77ab517eea5fc40e8e75e1ebcdad7f1f7e8ec0630efed8aebaebbafe0 Copy to Clipboard
SSDeep 24576:E2eiRhQw9sSGRxqP1D1/A7/reW1/4Wsv9MWxSrJD2AL:E2XL9szRw/FAZsv9LxYsy Copy to Clipboard
C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 02fa852b123c0c7560a73e67e16c6fb7 Copy to Clipboard
SHA1 d4fdb93d29fb367f167c87adc5ff986a2f8a20b0 Copy to Clipboard
SHA256 68e166dc64d8ab5e25313a61d10199d1e0df2826f9bedf86d1d2d2351889a47f Copy to Clipboard
SSDeep 1536:lKS+U/+H1GAIcucp7xGqY7zdxBLQzZg3BVqwLRU7son8ruikKpg:YS+U/U1lIYpdGbv3WwLC7Jn8w Copy to Clipboard
C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 b925b0850064f4899a020c254ae9557a Copy to Clipboard
SHA1 e7ef77a1b58fb696ad6e5a5855c782291b3bb7a0 Copy to Clipboard
SHA256 7d035556f2591dd1796c8eb51adf0727ef3b6784ae5a9098d95a4ab2a290a30d Copy to Clipboard
SSDeep 768:MFXZ7dffSPXpfKuJBQf3cdZQLHozoLbncxHcHsBYpXWBcphKfXARaiC2K0xoPHEJ:OcvYvuEHozi3HsBYXWBs00UHCcOhvL Copy to Clipboard
C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 d39853831f55c46366445a8133198923 Copy to Clipboard
SHA1 369d432ca1f8656b7bffe64d1bd6649a6472175c Copy to Clipboard
SHA256 b0ad4075f6594cc19bdf17455fe5376fc8b2c19f107d86a2377f2d2541077301 Copy to Clipboard
SSDeep 1536:b1ZRaFzF7qEswG6WcuNbc7rrts/TS6hrA4TtD0zAo1Eq:bMNJqENWcuNo7vts/WYrXi8nq Copy to Clipboard
C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.35 KB
MD5 820024648e567aa302b1d75a1703beed Copy to Clipboard
SHA1 6ba32d75f0a2e757ac963a4f3789fb06cb3ab849 Copy to Clipboard
SHA256 b012600b4a2d2ebd626511fb1503a6548854f237553ec9731d9c1b9ddc2b744f Copy to Clipboard
SSDeep 1536:l3jDuLnE4RqYWk35vRqAXhIA/D87oEnOvdhV:l3sqLovRzXhICD85Yf Copy to Clipboard
C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 09f3945eb582aa5198bfb9669866b4b3 Copy to Clipboard
SHA1 0dfa6cd3cd4facb5550fd5e63c60f2a742dd8e70 Copy to Clipboard
SHA256 c32b31b4dd905774df0daad52408604702d09328bc78c016e3238ec5ae8c518a Copy to Clipboard
SSDeep 1536:WS7i5OB5qSnYiXDmMNXn9sQuTDpT2uJpkhHH4lfnxbWdB7:WCi5HSqMhn9sJBTtJpkhHHoWdF Copy to Clipboard
C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 12ba23a66ce704f2d44f5f931b46621b Copy to Clipboard
SHA1 cf52552ec3a4c05dfd2e152fe31ebbde1fd18888 Copy to Clipboard
SHA256 0dab3e136376de078ccf5c71836b82182b701daf63f18eff3fcaf4fe912139e4 Copy to Clipboard
SSDeep 1536:J57IdD9J0XqDh3JNcgyFWwv+q5jBJ2zB75SCh/IPzvDzQAbLuMK:J57iwq13MNwq5tw3IPrXBaMK Copy to Clipboard
C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 2a0491ada258f7040b3fa98766f41ad4 Copy to Clipboard
SHA1 e21496eb8b5d2ea72379d18c67aa32bae8066035 Copy to Clipboard
SHA256 270205cea69b588c175331a7acfc8ce0f0426f2ff46d8c8ca468bd653213f7e6 Copy to Clipboard
SSDeep 1536:5syzOSbxxZCjgi2mXHsBkvQhhtq8QuJiXNL+GS55q:lzT/kgi/HeZtwuJij Copy to Clipboard
C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 9fd9285c517ad52d70eb433cbda65393 Copy to Clipboard
SHA1 5201a7fbf963143457ad34bee3df80c0551e1dfc Copy to Clipboard
SHA256 6b2992b1d4fb30d350506a67639efa64a389295d4b840a8be96e2535bb726905 Copy to Clipboard
SSDeep 1536:n//wBczPBD55Ve67qQNux8e7gIem81Os4ROAfX19ZGzuZ:n//5zxo6mQNuxivn4Rbf5Gza Copy to Clipboard
C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 23241bc6e8f505cd15aff1bad9c439bc Copy to Clipboard
SHA1 f940fd7805964acdf2896a968ab3b414a3d13a31 Copy to Clipboard
SHA256 23381fcee5f6023d683023d5a3f82f578978f389477fa1cc67a574bd9afb27ef Copy to Clipboard
SSDeep 1536:BmvmhAUsvg24oAHOEMBgpuY71H3yzf+G+8J42w+vG:csA7vg2UHOEJ71izR42w+u Copy to Clipboard
C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.00 MB
MD5 1658a900df281d9f66350c71abfcd903 Copy to Clipboard
SHA1 9da3417b7144dc7236bf93c44fa966f3513d7c21 Copy to Clipboard
SHA256 ade7dd6e51492a3f2da33e6ee89ba135fb24bd82f8d66c02e784559beb0dc593 Copy to Clipboard
SSDeep 12288:KcaCjxMrXIE+cTxmLao7g2IXsvNF0hIygChRaqtBhU3IYaA60dkaok4RuZ7VfkB5:K3BcLao7gbcgNgC3aehUW+N9J8n Copy to Clipboard
C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 d67362afda5aff71a340cea998766959 Copy to Clipboard
SHA1 0855127b462d455eac6c52a09ae807a5781842c1 Copy to Clipboard
SHA256 825cc1749bc32d4239b781c1e3f3834ea2440a8282b848c924945ee8ff941830 Copy to Clipboard
SSDeep 1536:VfRz49s96rGs5CSd0nr5UCo5fc0mY4eZYt1UlhoTbhVEZJMIu:VfRke9LsC/2CoZc0mY4eZYt12hu+MB Copy to Clipboard
C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 6ad8fb9a79fe03e6e54684e2e1a8c7e4 Copy to Clipboard
SHA1 b1f233bbaebc653fbd0d407a885c2168854fb2b9 Copy to Clipboard
SHA256 3122008a0c936e1694693b6bf3ed05cca400dc949800067c3d97c5570e5c4c09 Copy to Clipboard
SSDeep 768:DaX61SdHrx0KyoDVLO6ZrwnhEHdsfZs/+anHqBsXoiPJXZzNJQozFz5fa2cOVJnc:B4ddJPkYdsxNeH68XNbPbf9cuNez Copy to Clipboard
C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 6e806211fef62cc0b8928d11aaee5a74 Copy to Clipboard
SHA1 285aa8258abab41011bc1ef9ec01d6e01de11928 Copy to Clipboard
SHA256 8fe2bb885d9dabd88a05dd01a6f9fa5e9d54ccfbcd34286c6b252207623dde61 Copy to Clipboard
SSDeep 1536:U15Tx2276OGXKEg7QLciVXwzQ7uahcEq7w2oqKqZE5VnDBpbP:U19xLWDKuBwFa/cw2gqW9pb Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 7d6f7c34e55aec109370dbdd9c0c1cab Copy to Clipboard
SHA1 74aab8efdbe9669e7b8096ba532b569ee376e1fa Copy to Clipboard
SHA256 0d544fc037d2b1b62512e9435758e8006f39d408966de4f162796b3c9936c6d5 Copy to Clipboard
SSDeep 1536:3A/tDcdxd4SQtdbDSz2k0Tu9oW8nMqSED6EKrCTCTAyB:3Wcrd4S0dHuLz9HWHQxwgB Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 32c088c8ff9a077cc6d42c30c4b3b04a Copy to Clipboard
SHA1 17b732567be7651705cd2ece6a21f4b74765423a Copy to Clipboard
SHA256 138add8fe2fce93cefb9049de79649fd4da68d5458dd5ea16c235f8c57d0e388 Copy to Clipboard
SSDeep 1536:Ijll7EiXO8iDIfHd/qkanpoV3oaDfHbzXqjHh0T2J5:8hTo89Ck14aDveh0Ts Copy to Clipboard
C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 175ecc7e608c2df505506c92824606a5 Copy to Clipboard
SHA1 0fbfa78428c6bf4386abc565cb99f0c041ba3311 Copy to Clipboard
SHA256 822b6fc0242c4a3845024829775c4a21871a8c85d227a2634d7ae97b3694c888 Copy to Clipboard
SSDeep 1536:h8A3oxrORF6jremGjZIxsc5Sz2+tJmmhFzrH3:hamwrIZdc5S6KLhRT3 Copy to Clipboard
C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 9ab1903984d052f5515aba4df82b0f59 Copy to Clipboard
SHA1 fc8bdc58b37380e4e95122a1a271f4a5f2db6b18 Copy to Clipboard
SHA256 73e43a98df1e6076add8cf28d784a91f7a33657776cb9f65a4f9b56d08899bdb Copy to Clipboard
SSDeep 1536:63hqv3rBeJAW8w92XQgLAICOh3dXetWqIxwq0Cf7ki:/BeiTw92ggLAICkSlOwa7ki Copy to Clipboard
C:\Logs\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.29 KB
MD5 0790ad9d52542114a84cab0320bd9648 Copy to Clipboard
SHA1 2be5d0d792adc4c9345874935ee9057e713a1951 Copy to Clipboard
SHA256 f8b62791ac49fc990af3ca42555a9169c5dd8a4148ae185ee0ee292a457d530b Copy to Clipboard
SSDeep 1536:VS0MP7pW5aX77Tcflm8gPqkoKo7bH7vFFafsOIQsSAAgt8JP7V2aQbA:rwPr3cdm8KTXo3bFgfzsSbgtA7GU Copy to Clipboard
C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 9a5f0ae96172d8867f44b735eccc877b Copy to Clipboard
SHA1 7e957f6a1d1a7b1af0b81e815b2856f8ebd605ae Copy to Clipboard
SHA256 c203360f9cddc2814879630d22e43a2ffe629a1586ffbf473548e9d03ddd72da Copy to Clipboard
SSDeep 1536:8QEZ5oW8Y13wlJFWFvDhs4x3bBgh0y2gxEjYJ9sVjY1BvQC:8QEzhiFWpD24x3bEVSu37 Copy to Clipboard
C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.29 KB
MD5 f3c57faeb4ee60cca54470e531639a15 Copy to Clipboard
SHA1 658ca6fc33c548858abe75f49d4d2db395eb0e41 Copy to Clipboard
SHA256 16ff167beae8e91e498e52c689fc768d309721553c84338a7af32c6039c79aec Copy to Clipboard
SSDeep 1536:hK9FRH8Yo3oEA/fuFQfF4EVGbqeaoEH5X+K5mjuXVei1QXmlpnbRZUybkiuXI:eRH8wn4nqReaoEHAKrt1QXmlpnbRaWkI Copy to Clipboard
C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 36355007de33377bf3ff6604478ccb37 Copy to Clipboard
SHA1 6663764d62c5d5c2716975f54fd72f9b127ac571 Copy to Clipboard
SHA256 dc4ef238ec53b677e0b81560398f101a826073a6c6aee5b65676f370e21c755f Copy to Clipboard
SSDeep 1536:H0uccxO6t5OgpeInu040hKvHS2Xq2pRn4Cb:ecjtX7ncEsy2Xq2pB4Cb Copy to Clipboard
C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 2b6e05342dd8f86667bc6db98c689463 Copy to Clipboard
SHA1 e8597adf83046824635f93e70049713a2528bc89 Copy to Clipboard
SHA256 3d6e8c9248f8483507aaacfc37d0cb2d98e4e6e10b9946d069e84c3561e7fb90 Copy to Clipboard
SSDeep 1536:SHs1MFOhoDCvUL9UnpzTMym9W4YtxMNpcPj1FMBtNDXzgX:1GOhoDLUpzTpaWd/MNpcTMRjgX Copy to Clipboard
C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 6fa5ca794d8e9793c4726285b5147612 Copy to Clipboard
SHA1 1d44ef22cc5fd5b61c0c5a97351b1c1bc5536f18 Copy to Clipboard
SHA256 a29038bcc1431ac9ce588fac2c8002a56d018dff7972e28b177092ce33696f2e Copy to Clipboard
SSDeep 1536:7/W6v+KHQaFiZkzzUAYjqngWPe6Auqi0T3U:7O6GmQzZkzmZuIk Copy to Clipboard
C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.35 KB
MD5 76c734f0a97082b428dd56658eef92ca Copy to Clipboard
SHA1 c07668cdd3f2e06f2f3fd9c407dbd36f95d29637 Copy to Clipboard
SHA256 5e42c41f04d4193242c78d091b9e75c14c4fd4daee9689bc9f698b3344f8f43d Copy to Clipboard
SSDeep 1536:f+jXH+N1pCPtTZ0K5bfhp3dmyitBNC/C6ItjTzGuhHLe0luntfR:Wy5CV1hplits+tvbyEoR Copy to Clipboard
C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 25e173c12fd5184cfcd3a0a9a63264d6 Copy to Clipboard
SHA1 9c3d2ecf4284cfeb2cc4aa6359148cd81c116dc2 Copy to Clipboard
SHA256 58764d0cbeacd0a633e22def54c740002617262c73e789851381e09b3f4e787a Copy to Clipboard
SSDeep 1536:tlrCgbmk8q+JI1gYgKqSci1khvz5uv01JwRD5yz:tMdpDJIiFKcJ7y01Edyz Copy to Clipboard
C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 cc0e98dcf404364d9e8859692c28a6c0 Copy to Clipboard
SHA1 4b1d1f6f15a9ddeeab4d760683eb56e9294a2f57 Copy to Clipboard
SHA256 a1a8c1b25a4188e4e2fead597c5e4ce4bcdecfb8d07211656d3fed1e220eef91 Copy to Clipboard
SSDeep 1536:pvG7iPcmZBfbujAtCNkf4mStzPw6/Espsgr04UpfvD:pveGBKjAtC84zdPwsBpssUpz Copy to Clipboard
C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 c80373aace9c3736858a390ffddadc38 Copy to Clipboard
SHA1 2ce8f0cf03be6fc21275d5d34a746dc6376f30bf Copy to Clipboard
SHA256 e525b0e35c0fc084b7f0b5523d0af89aaedd8a47d7e50b3048298631b8cf75bd Copy to Clipboard
SSDeep 1536:W8uElFgqETOZF8MBxtl9SWCtLquHMaNbUuL56JTA4SncGalP7o:WjElF4TOZtvl9STtLJxFT5aAHncXo Copy to Clipboard
C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 7b33fe95c1bede877506b2c20f673757 Copy to Clipboard
SHA1 b4e0c647b52a17283e433c8b7815d587783f4112 Copy to Clipboard
SHA256 7be3447756886449a176327753ccc9ae24900cbcce3e776468a5fc41758d5db4 Copy to Clipboard
SSDeep 1536:v6r78kde601sOhTgNJfzAdnYiQgzAFRdDgxNh62JbYKZ:C78kE601zhkNdOV6D6No2Wo Copy to Clipboard
C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 9a20688f1946809d83d692d1aabffe02 Copy to Clipboard
SHA1 e3f4727baad43e4981bcb029af8c4f11e96420a8 Copy to Clipboard
SHA256 47d27078647ba2c1be42304b0e11fa5e2588b18cd8ca6fbdd6dcb41f99611dd8 Copy to Clipboard
SSDeep 1536:kTZA4SanCM/3fEBLJ+0N/Wvi186lOWAtM3lxw1:aZBSaCePEj+Q/Wvi1nYBtOxA Copy to Clipboard
C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 7987b91838bb3e05a520f8cac83574dc Copy to Clipboard
SHA1 4499e333c8c9a7662308d17910dde2a714beffc4 Copy to Clipboard
SHA256 5496af0d53155b03baaf5ccfb6957e750eb9b7c0cfef697859e900b459cd5bed Copy to Clipboard
SSDeep 1536:aW2Rz4SugxmVYK3USyhT5Cuult6qYwtC/0XCEbUX+Gnu:aWw4SugxmVYK3USOTQu8t6qtq0XCE0+p Copy to Clipboard
C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.35 KB
MD5 9b7c213f432b8cb3226993474f6f1f12 Copy to Clipboard
SHA1 871daeb9e6c34ca857e06bfc3bc6c0eb778804fc Copy to Clipboard
SHA256 465062cdbcca7542f1573b205166a25d8a16f6c2e72a491510e20bc5c5dea88c Copy to Clipboard
SSDeep 1536:V6HWw6OCfv6IQFp2loiyyspt5Q7+kv0rhoqPpQOnoQhdMOcQhMi8:sHWw6OCfv6Fwlokspt5fS0r+TYoQzFT8 Copy to Clipboard
C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 937f38cb32a27b1e13fde3a84187f5fb Copy to Clipboard
SHA1 4c1537baa1d155a6981f21200e12fb4185dfe831 Copy to Clipboard
SHA256 b3214059a13c982f6c8f059f3811853ba95da2dfbe25bddf3a0368d12bf020b0 Copy to Clipboard
SSDeep 1536:uDyKHeWuuGRQuhdOQ+8dPzVtrHVirnIH+n8IVEyGAXUf8D7f6M:uD1HS/qadOyxtr1m1RxS8D7R Copy to Clipboard
C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.36 KB
MD5 dbec74742990fd8e311bd24dfa5a1e0a Copy to Clipboard
SHA1 276edaf75eb0f88bad8c55c1af781cdad21f6a78 Copy to Clipboard
SHA256 d5f8b0c2a17ccbb8246df3eb4b94626b4334d3212e942a5302adb4df3df258ac Copy to Clipboard
SSDeep 1536:X+EhuVhjoJT6BcqJ3JJxvpYs6YHdGl0R83qsS6n3xxjBWejwpgz:X+KT6BcqTJTT6Y9GwHOxBMuwpgz Copy to Clipboard
C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 448e592cdf8b0f22bff420ae2ee2b092 Copy to Clipboard
SHA1 391365c5e53096d04b40841ea74bc2798a58253c Copy to Clipboard
SHA256 5b7ac9bcd59b4abf2cae0501adfb0fd34e29ec3c29b609124ec4d442204a16e6 Copy to Clipboard
SSDeep 1536:1uGblxOF4llisSUH0zJiTiwgNmZQasUkxki2ObKC11vN:1dRxOCllSzJ6ifNurc0OWC1H Copy to Clipboard
C:\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 3e1d87a5ac55d28ec485141b165e3458 Copy to Clipboard
SHA1 b2d40a48f3642eb8e972ecc9d6096faf86d668c6 Copy to Clipboard
SHA256 342ebe2bde0720451374f904b4d7c92a084fa2f2c684f082014aa1805a7bda86 Copy to Clipboard
SSDeep 1536:KefKBnD7PrnU4A3YAhy2thDvkUcI+BuhyjjMUgyz:MnD7zUAqyODMUcIbhyv5gyz Copy to Clipboard
C:\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 931fc8124141b14d3f08730fa3e94819 Copy to Clipboard
SHA1 54fbbacc0707e75fb3e14ae80ad0b5b69824c11a Copy to Clipboard
SHA256 c40087318745c1f8197525b3b138a1c9cf68c73e630ac8df352ff3e6bca94242 Copy to Clipboard
SSDeep 1536:A5d/z5poR0nnv7H3ciM4Wr6/CVcDseCv5OqDz2Zj3Vt8IuvrLXdEcD:e/z51n4iIr6KuDrg4qoVqvPGk Copy to Clipboard
C:\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 8125b018556c0d681dfc4310e1e5041f Copy to Clipboard
SHA1 20921dc7c31bf1aea886a04065690ec3cbe201c5 Copy to Clipboard
SHA256 85588b5a2494af628c32ba4060cd1dc03206d8880a7d3f89aad316091348eb8f Copy to Clipboard
SSDeep 1536:52lb8MnRTjQnWwOTM4wjKiYj275FxK9PXc30NWhPUfqYQ5o/Y:5O9RTkpjKxj275F09PXc30wiQ5oY Copy to Clipboard
C:\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.32 KB
MD5 497ef9e81edf493814bd538c820eb9d7 Copy to Clipboard
SHA1 473283abfea77ccfb7f3db21a9cf8c5a0126a23a Copy to Clipboard
SHA256 6e8be895463d549fba5b6d24dfb2b01b47248609cdbb2885fc340ae4e6b75242 Copy to Clipboard
SSDeep 1536:yzkfC6tNUAiOoMemga6il1R1V1AWN3pt6Aoo/DEmlFUc:yz4LliOoMe06a7uW3h9/gmlZ Copy to Clipboard
C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.36 KB
MD5 90c44959003509e025b892dc5ae24842 Copy to Clipboard
SHA1 9051c2483fa6ca2c003e28bdb06170668926d47e Copy to Clipboard
SHA256 0484390805e5c34acdee1b22c0755d6599e4c58afde02dbe367345e60900cd32 Copy to Clipboard
SSDeep 1536:rw20nwrGUA9p/quPIHJMPfMIj1yhT9OArNTzzM:rV/Wp/mJm1yhZvTfM Copy to Clipboard
C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 9247177d74bc228d01654555698bc136 Copy to Clipboard
SHA1 acf7c4a50b599f89e0a8f11707a827975724f8c8 Copy to Clipboard
SHA256 065b592a8659ebebdd4b98cb3a3d5a481379a8a21f16ce1301a24af8c6f592cf Copy to Clipboard
SSDeep 1536:8h3t6RIkAwEbtjplOJ+jtrXEsQrcmjRqrUj39R8rSBRB6:696RmbJljus7YRKUjtR0SN6 Copy to Clipboard
C:\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.33 KB
MD5 5ba26a27cae347a747c865855cca51a6 Copy to Clipboard
SHA1 c8cfe8f4ce349f17d2580b39b0d012b62e2a6d43 Copy to Clipboard
SHA256 2d1a1307ba0261df2e9367ce0d54d239114f98130223091d13ec104379229729 Copy to Clipboard
SSDeep 1536:RZiEJoSHPpGpgff/Jw9aVvoxdPVFL5b4kHPDW+jN2KkZ:TiUo+JTVQxtVFdb4qDjrkZ Copy to Clipboard
C:\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.31 KB
MD5 f5e1575a1089f34f7f4eaa2df6a32fa2 Copy to Clipboard
SHA1 3bf553ef8e3d5a8e2563f6d4aa7ae7d45d98622c Copy to Clipboard
SHA256 94aeadb1847b140059a5679d8cc9709acb2303b404b0b0b0a5bb4185adfcab77 Copy to Clipboard
SSDeep 1536:y2TwlYPl2CxV0g7lsghbI1+BjAZeU/tXMH82qFUih2:9TwlYPlT6gqgxaCAjtOq72 Copy to Clipboard
C:\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.30 KB
MD5 f5343e15693921eeb091159734a81930 Copy to Clipboard
SHA1 aee490a56a22ca4b5249a2595a94e23688f7bbfa Copy to Clipboard
SHA256 145ae47a31e8b2f80e5fa60eac9de2aaffc4d520388ff94aa4a59c56b3a7b55f Copy to Clipboard
SSDeep 1536:MNnT+rOUeU5XqPyfBvX3Ok+sgYDLcUBMhGoTuuK:MNnM7pqaFuk+s/DLzBMhW Copy to Clipboard
C:\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.00 MB
MD5 483451e926fbbaaaa220f37828de2463 Copy to Clipboard
SHA1 e11f78643304ad1eb617c9cb607e1376ce050bfb Copy to Clipboard
SHA256 cf65257b7b7a0a1407192ff4599d5525d1949a21555de8d264ff23a327e8ba27 Copy to Clipboard
SSDeep 24576:Y2pKQs5xbtYZjyTUcXrD4f+bxaWDGNFmXizncX:dpExbt0y57rb4X2 Copy to Clipboard
C:\Logs\Windows PowerShell.evtx.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.27 KB
MD5 016d4e2b38893efa95a09d905cdf60c6 Copy to Clipboard
SHA1 5350d172afc4f20ff7ce9198808d448afa2c958c Copy to Clipboard
SHA256 72d16aa4be12f8951dfa8e2aba95133ff168108e4dc35d9deecdd6a7a47e77fe Copy to Clipboard
SSDeep 1536:jdbWIE8R1cqF7s6WKSsqYKoh0A80petejnYCKawk:56INNF7DW4eUKawk Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.47 KB
MD5 06ba8c96d2fd573c1cc85ddbe068923c Copy to Clipboard
SHA1 2861aa93ffc45696e1adc227e888ccf578a73eed Copy to Clipboard
SHA256 67a518d5f7cb583becc93e7155de55ad9c71728839a8aec5ee9c8030f8bb4e58 Copy to Clipboard
SSDeep 384:5Ox1EtHt2EihHqZYvwRwxcCtgitkdwdOHwcVcvwNi/IauxCpEEsQvB:6E1tCsbqyiNsQ2i/IauUpWG Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 20.99 KB
MD5 a5d5f27805eaf656f1b16b10b5c69351 Copy to Clipboard
SHA1 ea331df98abab475407dd89fa96e822eedfee2a3 Copy to Clipboard
SHA256 44f0d88a7919e031106387fd9e61cfd6fec7ef99c098cb65be5a1f815d9d7be0 Copy to Clipboard
SSDeep 384:wG7fM0xpzW71Wq7SmL/7aTzok57jGnepCW+a6NePrKYEtH86VC2Seo:wUMMzW71Wq9/aTzx571P+lGPEtUeo Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.97 KB
MD5 3b1f57161b27357377fffb9dc68084cf Copy to Clipboard
SHA1 a12c83ec25dd3d094fec064daea5e8158ace80a6 Copy to Clipboard
SHA256 ce2920c6b99c392ebb90e89523ad03df5a87d8827bb5af5ea65916d2e8ef7bf6 Copy to Clipboard
SSDeep 384:I7SjVnDm3WVVeuPL1BpxwAZQYPG7LlmYiqo1Bd5drzsw:aSjRm3ewoJQvnDiqI55sw Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 19.47 KB
MD5 8193c573a64e09ddc18942af5bbc852e Copy to Clipboard
SHA1 3a00de38bb2a84a38ae189d3babf4e0f3132ae09 Copy to Clipboard
SHA256 ff475875ddf0963392acfdd1a07d70c300c765648ae65417b00c1d9dd153272b Copy to Clipboard
SSDeep 384:mTYn54zBSLly9qJILIU5jAtTxdC+yrA59DXJKpJVTWK5fJLoXI:mTS41SLw6ILIcAt9dv7dSJVy6fdf Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.98 KB
MD5 e1575851e5b4f3199614ed83df9ad914 Copy to Clipboard
SHA1 0d662579b7ddf00bd633b4fb52c46fcd78cdfced Copy to Clipboard
SHA256 ee56814913717d4ba547c7d41c7cee1c056c0a203de7afd4de71e3482a99c4d4 Copy to Clipboard
SSDeep 384:nRHPHO4xBKOVplSDOUH+ce0Exokm6hfHKF38m+riR8tf0FQxxcGPXT:no4HGDhHY1hm6hm34r0+MWxB Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 20.48 KB
MD5 9f0b5f6f1b40d257e427d31e072675d9 Copy to Clipboard
SHA1 e0cbddcf70cdea8056004af3fddde0eb44db8565 Copy to Clipboard
SHA256 f946ad4f3b5a3220c5c0a909b6b4c38d622b1ec5e8b91233130f4bb734600e31 Copy to Clipboard
SSDeep 384:1ieZxh1WLvAstBUMYRWisuMQ5SlHwzNGfyTyH50FuSdCKk9H8SIqlfZkNMpB66FH:1iEh1WLvAIdV6SlQhCUyHeFuSdFwDIQ1 Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 19.47 KB
MD5 84f30afd4ed28c40aed53c180dd094ea Copy to Clipboard
SHA1 0ee1ec8e53f3c56565fc4865827e45fe1e9a1f1b Copy to Clipboard
SHA256 0ce6ca5dd38fae092d478722434a246ba4f38b7778618c75075e1f13eb69b3df Copy to Clipboard
SSDeep 384:rA5xbnM1z7tme3okYdq6d1qQs3pJhLHoyYXxGh/AfttR0qdyA7PQDpHeye:rCCxp93oTXlmJhrYXxGh6R0qBINk Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 27.47 KB
MD5 d476117007496e7a4efe2f3b6f868f91 Copy to Clipboard
SHA1 aec24d600729a5b1e1406b8d81571481ed82e624 Copy to Clipboard
SHA256 ef3584b604835e59549b8b58c425c051f18494015eda6f7d2cee5acd2352debf Copy to Clipboard
SSDeep 768:Z76v0So+823tOsKURqftlfZ9iOi12zon9iN/:ZOdV3tfKTfP3Kmon9A Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 26.48 KB
MD5 b9e5f76c1cf0f4aaea441e1cf3cad57d Copy to Clipboard
SHA1 118fe1a17443112987e9a1421dfba5fb36404b74 Copy to Clipboard
SHA256 490d4e908feee839d0cc0d5dbb03947854c5f38d3f5edcd840b80d24461e1ee5 Copy to Clipboard
SSDeep 384:9O8w/nUYvQ1aC6n/VfSW4zB63aW4Pn7hSjXiui7NIAsqVAqwkSYcykIth2LOLRR/:9wntI4Vn96XB63aW4P8XiuvAsa/dfhR/ Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.99 KB
MD5 7be677ee090f362bbd4e3e4bd03ca452 Copy to Clipboard
SHA1 cde313dfa42eb4ec5e960f88ae9e034c4ea4d5bc Copy to Clipboard
SHA256 4dfed975cf623fc3163e22e15e1668690ed1a1d087c4da179dae36e00edb21a1 Copy to Clipboard
SSDeep 384:IhE3OqD4qLq+TEeVYer7LBVAWWg/eIg+0Ptn6LKcap+avx7htKwBz9Yh4fm/WX:R+JqLqZIz7LfAWWg2In0Vn6LoQsqwm43 Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 19.47 KB
MD5 3399eb2e3bb533c777df21b2cd91cdc2 Copy to Clipboard
SHA1 a8bea12f350237fc16705616a474dc9f5cce162d Copy to Clipboard
SHA256 02b2ecbb7481f5d51938ac2fc66d541d88fc47c92fb930521013f47617f4d329 Copy to Clipboard
SSDeep 384:Ix1EYHMU1aiVQSqrb9zaqsbBjo13tmJAHCqjZrff2bmNtdymbE:Ix1HHMUvQSEbBs1cL1NeGdto Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 24.47 KB
MD5 3fb66dcec6a4cd9a302c16b9f86e21f2 Copy to Clipboard
SHA1 438778257f24d03d8ae62cba6116068f112ae487 Copy to Clipboard
SHA256 fdfa879d5735a17e5059d6f6f3a993ca4ec0e652b656bbe552cce9673e8a7896 Copy to Clipboard
SSDeep 384:AKM3pb4Uve5VviDy+Is9Pgc0pmE800rNjb6KoJZ2I7P2LrIpaic/wKAdXW:xspb4UiVKDy+1tymE800Zjub7Pqi9dXW Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 22.47 KB
MD5 b0d7177fca2fdfe84f558beb1d6fc7d0 Copy to Clipboard
SHA1 23b77c7fe7d9854d24604e005d7b1e389dcedca1 Copy to Clipboard
SHA256 d939c6ab1c43650184ff863ff9e9f82e18074fe6f71ae0c2603f589d295cd634 Copy to Clipboard
SSDeep 384:HqiUC7ohb4rHgnUOjTFsnC1SPpLsGdbZZk/ULvNbhQY2C6/pZwnIV79A9XUPAiK+:H92UjgUOj5sCohsGvZCMPQYn6/pZwo7B Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.97 KB
MD5 6019ed8d6b764f1255042ba0738debe7 Copy to Clipboard
SHA1 3bb2a9a1b5fd6b949f00cdf06c38b1cf40dfd253 Copy to Clipboard
SHA256 19ab85d7dd173d0ad94e6be41c774f49795cce3fe75d13b760eac45e876451c5 Copy to Clipboard
SSDeep 384:TJp+XpNRrOAIZ7zm0SW2GbaA0jtT/vxbXSsA0pvZkv2HXdPQi0GnSXOaCF8O:TCjR9nG2A0jtzxbBhXhQifnScFH Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.97 KB
MD5 7017b8c5aeff3049c2cdbe3bfa9c79c3 Copy to Clipboard
SHA1 dfeded74a57e893e51542a798c5a62454826b3f5 Copy to Clipboard
SHA256 05282b8b37f44f1b5bab31d7f22a181d13d6877d67bb1a4e2edc050ed775d790 Copy to Clipboard
SSDeep 384:gBxc1+vdbz/cnRF/2umUgYQhjamQgivp2k9go4Jx4T44FiUm18O:yxc1Q5WRF/0xvhjGrvh9goox4M4FiB13 Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 69.47 KB
MD5 175577eaeb7d8ec8fec90c4fbd34c09d Copy to Clipboard
SHA1 1deb3248a95b10fdf15fa62df267e7efd5cbc662 Copy to Clipboard
SHA256 89fac26ea526dc4046fcbbe7dbddb4068149324e34dca05f39be76e6211b641f Copy to Clipboard
SSDeep 1536:AhEXvrRmWB+xzwqUqTpRpl02TMNbgq9LWZnfsBfR+MDPLESSQZef:J/rRDB+xzwO/oxBKZf8fd3PLE Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 24.47 KB
MD5 02b8bf808d4ad8d07c420a4aa8dc82c3 Copy to Clipboard
SHA1 5b8f826033f4c0ee6998961e4b8ff41daad981f5 Copy to Clipboard
SHA256 797d65171e7563fe29b73f22d2a521a0ebfe0e8412f673056671ef6383f543d9 Copy to Clipboard
SSDeep 384:VCW9Py9EIDFNtUMhmdTi/1B62K0EW0yRTAn9sTucLtkMno3LUBbdU/GrcfspZ09S:VL69pDFNBhoi6/LQtkMQLUB5U/OcfMxd Copy to Clipboard
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 2.43 MB
MD5 cc188469035ef7487d3026edec4b9b15 Copy to Clipboard
SHA1 f79ce6a4988aae65e93f88f4092bd2439c96f285 Copy to Clipboard
SHA256 9d7e2d731e6f250271ee15d7f698849b110f1953dc0f6a91841e679886506352 Copy to Clipboard
SSDeep 49152:aU0NzxBTEWxeK+TiJ5K0xxv9RaCtzQwUr:aUXGQ0xVHaCmwUr Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Not Queried
...
»
Mime Type -
File Size 17.42 KB
MD5 9b03efa4791feba751816c850f684f1c Copy to Clipboard
SHA1 7a73474a4f3e88ae083a069036440b9df9ee22ed Copy to Clipboard
SHA256 5ac992cea3cd84be88675a316e08bbadff05e8d05ba44693f800c4f58b642aad Copy to Clipboard
SSDeep 384:fZkU5b9VclBCi1aYvUt8fwmLg2NWHapXteJSa2tQ67gYbaRe7hNW:fWc7oQmUefwKfNWHapXsl8NsYbiiE Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Not Queried
...
»
Mime Type -
File Size 42.23 KB
MD5 2f566178d36973a6e4731da7c044e4a7 Copy to Clipboard
SHA1 33df1199f393b5348a75f280731c56b5837ac71a Copy to Clipboard
SHA256 9e1d30c0a954f90fe17a58287a45281203a560f596a7e6e1aad117b2204fbffc Copy to Clipboard
SSDeep 768:arMyDhcAAkgnV9N2ea5mcs0y15qqaH8b80EakhOiM6VRFYDRAkNouzZE:arMyDhnfgnV9N2eys15TacyaRbuOOkN4 Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Not Queried
...
»
Mime Type -
File Size 42.14 KB
MD5 b87171a8b77f93f8372687c85a0babe5 Copy to Clipboard
SHA1 30ac4c58082afc0c1349564a1cbb110efd918356 Copy to Clipboard
SHA256 d10d36ae9afb256ee6629e3f5fb8eb72ba9963e6ec0c263ed4f703d0a11fa731 Copy to Clipboard
SSDeep 768:tgA9LSq+HrTWe0JiRp++s/nHwbnNH63hwuSlpIoCuW:tgbLKe02p+uNCwuSW Copy to Clipboard
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[mrcrypt@cock.li].MGS Dropped File Unknown
Not Queried
...
»
Mime Type -
File Size 956 bytes
MD5 199bd5e9a3add873bc8371ab20585c6a Copy to Clipboard
SHA1 f51f68ae8daf30a87d22887060a0674ed94a7da3 Copy to Clipboard
SHA256 ebf5b911b421161668dc54c54e79cb3379c6ac17088374a05e4fa222711fc9d7 Copy to Clipboard
SSDeep 24:N5FZZJ7KQ4j10umnslN+4SHofdwofyb7L7cJwY+NetthAs6Jf:hJ8eumnys4SHofA3cJIetc Copy to Clipboard
Exit-Icon
WHOIS Domain Information
Domain Name
WHOIS Response 

       		
      

     

    

   

  

  

  

  

   

    
    

     Function Logfile
    

    

     

      Download-Icon
     

    

    

     Exit-Icon
    

   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image