Overview

overview

10

Static

static

sm.dll

windows7_x64

10

sm.dll

windows10_x64

10

spr3.bat

windows7_x64

10

spr3.bat

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78.zip

  • Size

    379KB

  • Sample

    201104-psr4ev2yke

  • MD5

    939a0e210f1039d0014ea5b64b3c506a

  • SHA1

    3e795b5553149f6cad2fecd6c15140e83308a0e3

  • SHA256

    dcf6d7b8ae5c8513a6dc5b2580641770f5376ef2754c1cd1d91f80a3b66e01f9

  • SHA512

    b51cf188a34ad44e813babcb4bd1f786150de7ff9658a92ee27a6abd75ac7789ef1d6cc3f2af56c1460583c95d1d61897e4eb3f8c732b003d4f0942cda99569f

Score
10/10
egregorransomware

Malware Config

Targets

    • Target

      sm.dll

    • Size

      790KB

    • MD5

      65c320bc5258d8fa86aa9ffd876291d3

    • SHA1

      f0215aac7be36a5fedeea51d34d8f8da2e98bf1b

    • SHA256

      3fd510a3b2e0b0802d57cd5b1cac1e61797d50a08b87d9b5243becd9e2f7073f

    • SHA512

      897f7d24f6d9a53506ee73aaf692b8293906e1f1fe13539e6d3f88fb8bafa0467632233f2b0e5a2ee1de686667c8d10a6c07f27559ff0f0a382a073e71e575e6

    Score
    10/10
    egregorransomware

    • Egregor Ransomware

      Variant of the Sekhmet ransomware first seen in September 2020.

      ransomwareegregor
    behavioral1behavioral2

    • Target

      spr3.bat

    • Size

      104B

    • MD5

      be24d1c626ab197263bd959d649a5f3c

    • SHA1

      531babc643f30cbf124b8b851bc00aaed02d56f3

    • SHA256

      c6f6c3193603de650e709bae9f31c3749859ba88fd71b678be264e2bb46efa10

    • SHA512

      66c094d2ae497bc46eee18eff05bd2faf087ec21e6bd731328301b1d91828b58f86ca523b8ac78ebd57ee111b2cbfb3848e0bad4fa5f0a77c398dfbe4f4509f7

    Score
    10/10
    egregorransomware

    • Egregor Ransomware

      Variant of the Sekhmet ransomware first seen in September 2020.

      ransomwareegregor
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks