Overview

overview

10

Static

static

BadRabbit.bin.exe

windows7_x64

10

BadRabbit.bin.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BadRabbit.bin.zip

  • Size

    394KB

  • Sample

    201104-8w71ws11hn

  • MD5

    864e1f77bf6ba6d38b94038a85078523

  • SHA1

    0c337707e2d3320976a5d3f99868d5090addbbfe

  • SHA256

    34846131fbf83a71a20dfe4b12d68adb2b764dec18e13a26f6af5b107336616c

  • SHA512

    c8366a7c943755dfd7dd5ea1a04ac6b2a0804d315ca33bd4aa7f1a18de9b90a94e49df1abd4d64ed01aaee556025b9b267fde0a5f5e3d7d6bf1dd852c9f3b745

Score
10/10
badrabbitransomware

Malware Config

Targets

    • Target

      BadRabbit.bin

    • Size

      431KB

    • MD5

      fbbdc39af1139aebba4da004475e8839

    • SHA1

      de5c8d858e6e41da715dca1c019df0bfb92d32c0

    • SHA256

      630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da

    • SHA512

      74eca8c01de215b33d5ceea1fda3f3bef96b513f58a750dba04b0de36f7ef4f7846a6431d52879ca0d8641bfd504d4721a9a96fa2e18c6888fd67fa77686af87

    Score
    10/10
    badrabbitransomware

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

      ransomwarebadrabbit

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks