General

  • Target

    6288030725079040.zip

  • Size

    39KB

  • Sample

    210119-678w2lvwp2

  • MD5

    437a43b7b11cde0dcbdddbedfafb9783

  • SHA1

    d55bda5c893ff2bdfc83e1425aa1fe95462a54de

  • SHA256

    90fb8e525e7db8f6a8a5074af95eed90cfed554520e6f0013289c3ea541b89aa

  • SHA512

    f27e6b4f7fcce4db09a5827fa38fd6e46e9aca732916818b7187a3146d7bc3d148356b0a407676a24e0faa0afbe81ed3f1e35b5d852abc1d2eb6ca5a05bc0c44

Score
10/10

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\READ_ME.txt

Ransom Note
All your data is backed up You must pay 0.2 BTC to 19xxGz9WDmacNZ9P83v6QMmMgbCQxC1gnR 168 hours for recover it. After 168 hours expiration we will leaked and exposed all your data. In case of refusal to pay, we will contact the General Data Protection Regulation, GDPR and notify them that you store user data in an open form and is not safe. Under the rules of the law, you face a heavy fine or arrest and your base dump will be dropped from our server! You can buy bitcoin here, does not take much time to buy https://localbitcoins.com with this guide https://localbitcoins.com/guides/how-to-buy-bitcoins After paying write to me in the mail with your SERVER IP: [email protected] and you will receive a link to download your Decryption tool and key
Wallets

19xxGz9WDmacNZ9P83v6QMmMgbCQxC1gnR

Targets

    • Target

      888f64a7abc8080cef8bd58ce1c502975de5c6e2a178c5646f27ef9f8525c642

    • Size

      214KB

    • MD5

      443731823c3a825fcb2972b5efccfd15

    • SHA1

      60535fd6fd06b65baf347e86cd8229d5cd4733bc

    • SHA256

      888f64a7abc8080cef8bd58ce1c502975de5c6e2a178c5646f27ef9f8525c642

    • SHA512

      789d7a22ae779dc79dc1404c9b2acbd987cb8e84a7edb6bf49799cdd3dc700b38fa64a658c9dfce80dd224b70c9655c2043cc736ec1c590416bb81b12bab3540

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Impact

Defacement

1
T1491

Tasks