ec94faf102fb59ac77927c3c971656e37bcfbf8bdc5d67e898a8dc860fe83dc3 (SHA256)
RansomAES.exe
Windows Exe (x86-32)
Created at 2018-05-06 09:18:00
Notifications (1/1)
Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.
Top Threat Indicators (View all 571 threat indicators)
| Category | Operation | Classification |
|---|---|---|
| File System | Modifies content of user files | Ransomware |
| File System | Renames user files | Ransomware |
| OS | Modifies Windows automatic backups | - |
Screenshots
Monitored Processes
Analysis Information
| Creation Time | 2018-05-06 11:18 (UTC+2) |
| Analysis Duration | 00:02:24 |
| Number of Monitored Processes | 3 |
| Execution Successful |
|
| Reputation Enabled |
|
| Termination Reason | Timeout |
| Tags |
Analyzer and Virtual Machine Information
| Analyzer Version | 2.3.0 |
| Analyzer Build Date | 2018-04-12 16:32 (UTC+2) |
| Adobe Acrobat Reader Version | 10.0.0 |
| Microsoft Office | 2010 |
| Microsoft Office Version | 14.0.4762.1000 |
| Microsoft Project Version | 14.0.6023.1000 |
| Microsoft Visio Version | 14.0.6022.1000 |
| Internet Explorer Version | 8.0.7601.17514 |
| Chrome Version | 58.0.3029.110 |
| Firefox Version | 25.0 |
| Flash Version | 11.2.202.233 |
| Java Version | 7.0.450.18 |
| VM Name | win7_64_sp1 |
| VM Architecture | x86 64-bit |
| VM OS | Windows 7 |
| VM Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
Sample Information
| ID | #49253 |
| MD5 Hash Value | e28fac9e5887044dbde5ee365946f796 |
| SHA1 Hash Value | ad64e6dc835d57e2eb83d90899d6f905a2e1b8b3 |
| SHA256 Hash Value | ec94faf102fb59ac77927c3c971656e37bcfbf8bdc5d67e898a8dc860fe83dc3 |
| Filename | RansomAES.exe |
| File Size | 128.50 KB |
| File Type | Windows Exe (x86-32) |
