Overview

overview

10

Static

static

b.dll

windows7_x64

10

b.dll

windows10_x64

10

spr3.bat

windows7_x64

10

spr3.bat

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    t6-zip.zip

  • Size

    378KB

  • Sample

    201104-tbsnadsazx

  • MD5

    2640e6705fbd52b2ac6178d8df564af5

  • SHA1

    cf092abfa46e38741e7e3340d0f99c71b1b11d42

  • SHA256

    260b414641d3cb4105b2728c88965bffad88f63460f0cab4bcb8bbb9a1c2f8ca

  • SHA512

    b7e9eca57e2b7ace7064365eb1b2feae07ddd6fad213cc8a8d4fdfc140b63c581c1240cce0b55c7877cdc9551cc5052ea5e4a956e8d1ace29c69f417c1734504

Score
10/10
egregorransomware

Malware Config

Targets

    • Target

      b.dll

    • Size

      788KB

    • MD5

      4c36c3533a283e1aa199f80e20d264b9

    • SHA1

      f73e31d11f462f522a883c8f8f06d44f8d3e2f01

    • SHA256

      aee131ba1bfc4b6fa1961a7336e43d667086ebd2c7ff81029e14b2bf47d9f3a7

    • SHA512

      b2bae09cf2cce6c51b927aec9d9e3d66105337fbc81460350c5b2d255414f14e41c698f8ab4f06d2b98da684d854008bab78bf7a54cdf988969736ebb1272e50

    Score
    10/10
    egregorransomware

    • Egregor Ransomware

      Variant of the Sekhmet ransomware first seen in September 2020.

      ransomwareegregor
    behavioral1behavioral2

    • Target

      spr3.bat

    • Size

      119B

    • MD5

      6cd1238de28090a7168d937086870ca5

    • SHA1

      b2bcf00d05eec6d36157c038a1098264e810a2bd

    • SHA256

      6a97dbe575aeac15b334c4e1130e63d6292de0f96403e83d430ce451157d0460

    • SHA512

      b7ac5e83dae70c0cb5a34b711c05444c1d219f28b187c2e55d2c48b767746206daa01fb8f71e37e469df9cb038090f97c9a3d8736082f35d05e086adf38b1435

    Score
    10/10
    egregorransomware

    • Egregor Ransomware

      Variant of the Sekhmet ransomware first seen in September 2020.

      ransomwareegregor
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks