Overview

overview

10

Static

static

10

$RY22222G1...M9.doc

windows7_x64

5

$RY22222G1...M9.doc

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    $RY22222G17222222222M9.doc

  • Size

    399KB

  • Sample

    210125-ghevhjdj52

  • MD5

    908cb0ed7bdd34f4712318c8f2c75020

  • SHA1

    acadaf2905c51eeff68ae9f4e9e15b1d29848de4

  • SHA256

    6f1eadba6e73d7451a46ae74d2dc9e7d31c9d119e739c44c35e7fbef7e121c69

  • SHA512

    dc297307efd3675fe6e4ecf930291b7d844ed700465d4072b62cb8e3b821989a7c2ecb9497a1c422beea4b7f132f74c61853fa62c7311e14b5b1e980b30ee7ba

Score
10/10
ostapmacroransomwarexlm

Malware Config

Targets

    • Target

      $RY22222G17222222222M9.doc

    • Size

      399KB

    • MD5

      908cb0ed7bdd34f4712318c8f2c75020

    • SHA1

      acadaf2905c51eeff68ae9f4e9e15b1d29848de4

    • SHA256

      6f1eadba6e73d7451a46ae74d2dc9e7d31c9d119e739c44c35e7fbef7e121c69

    • SHA512

      dc297307efd3675fe6e4ecf930291b7d844ed700465d4072b62cb8e3b821989a7c2ecb9497a1c422beea4b7f132f74c61853fa62c7311e14b5b1e980b30ee7ba

    Score
    5/10
    ransomware

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks