Trusted Design

Cryptowall Spam: My Resume Protects All Your Files

概要

Talos has found a new SPAM campaign that is using multiple layers of obfuscation to attempt to evade detection. Spammers are always evolving to get their messages to the end users by bypassing SPAM filters while still appearing convincing enough to get a user to complete the actions required to infect the system. The end payload for this campaign is Cryptowall 3.0. Talos has covered this threat repeatedly and this is another example of how the success of Ransomware has pushed it to one of the top threats we are seeing today. Whether its Exploit Kits or SPAM messages threat actors are pushing as many different variants of Ransomware as possible.

Created: 2026-02-23

Indicators

• FileHash-SHA256 - 5fead4017f0770fd0dd8a99b97b514730f46c30ecd61857b1359701b2d73caa7 -
• FileHash-SHA256 - 3889d489f3905164b2c5731b8fb9c9bbe95ead175c7070f0aa77efe040a18b35 -
• FileHash-SHA256 - 10fbbeb985f18de13a145f05314a4ab2aaf42fcc276c3e24c6491b6482fe1d5f -
• FileHash-SHA256 - 81af832b81e034dfe742698104a90c1ff6bd490e1c289a49968a15036a268a6b -
• FileHash-SHA256 - f6ad2ad1fceb98f6a61360afd17d02dab4c0d2919fa6ddfd978582cf044a9655 -
• FileHash-SHA256 - 5bf3471231a4b0a5ad0685c9ee36e9f1f21df3f6c8fcbcb83d60fd64cc513582 -
• FileHash-SHA256 - 0c066baf5153cd8e522b74316fed24c075020ff59c52361f253918fa2d66c7ad -
• FileHash-SHA256 - 6be76dcc877ac42d5af53807b4be92172dea245142e948dba1367c274ab6a508 -
• FileHash-SHA256 - 2dd699613d9b6b709e4667457acefc3009db57684a85f488396c4e8f4c2d9521 -
• FileHash-SHA256 - 41188ce5a34605fd853b48ea1f026dc5ffc778c808be57d630f87146c7dd3bad -
• FileHash-SHA256 - 2a7b9016bb8004d101dba337c5d1e679c4b88bea198e425a42081ec4186e5b45 -
• URL - https://docs.google.com/uc?export=download&id=0B-HWsX8wPhPFX1M1OEtuT19Za0E -
• FileHash-SHA256 - 2c03f7497ea8cfc4e8633f0ced8d28e65d8505f94e8d28297c7096f42d8bf2a2 -
• FileHash-SHA256 - b53b58df6445bc4c754f178af66f0b3a5ddf1e93971439d05be61ad9f0bc0997 -
• FileHash-SHA256 - 36da04ec68a9e0031f89d12065317f8a64ca3598ad0349991fb684e323435a62 -

類似Pulses

• CRYPTOWALL 4 - THE EVOLUTION CONTINUES (score: 0.79)
• MarsJoke Ransomware Mimics CTB-Locker (score: 0.76)
• CryptoWall v4 Emerges Days After Cyber Threat Alliance Report (score: 0.72)
• CryptoApp ransomware: changes & active campaign (score: 0.72)
• Analysis of a piece of ransomware in development (CryptoApp) (score: 0.72)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る