Trojan (MD5): 2f56038a57495ab5608e1c67f7dbd688.bin
PCAP: 2f56038a57495ab5608e1c67f7dbd688.pcap
Decryptor (MD5: 4de3f7ed12fda2142563c791fe609867): decryptor.exe

• See the README for information about the archive password.

Analysis source: Cuckoo 2.0.7
Date: 05/12/2020
Triage: https://tria.ge/reports/200512-vnrke936qe/behavioral1

This sample highlights activity from Gamma ransomware.

Process activity

Ransom note.

Beaconing activity

IDS alerts generated by Suricata