Overview

overview

10

Static

static

Word document.exe

windows7_x64

10

Word document.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Word document.exe

  • Size

    860KB

  • Sample

    210215-kezpk97n3x

  • MD5

    a1b86218cd460f7ec63bb0e8e97cacaf

  • SHA1

    2ced2422fa7d1bd36edb411d4881d0488d0ac71c

  • SHA256

    e858c09b00ed06ba71a17f4791b6264ab9cfac3dcc9d61df10f9b2a1e7b072e4

  • SHA512

    e467adac35d38b69d9a48f1cedb98b249c96c2412f9efd00bef6e680f3494d3c46c8ad83ab0e17462f2056cf91fd32e7707d1b4d4736aa515229359b115767c2

Score
10/10
persistenceransomware

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\Artemon.txt

Ransom Note
Hello! You victim on ARTEMON RANSOMWARE! your files encrypted For decryption, you must send us 0.001 BTC For decryption, you must send us 0.001 BTC For decryption, you must send us 0.001 BTC For decryption, you must send us 0.001 BTC Adress BTC: 36bUzEo3hksCZfQ4GTCogZnWc5ZTTtv3MD Your key that you should send to us: eycfs-50dsY-YiVip-GoP00X Your key that you should send to us: eycfs-50dsY-YiVip-GoP00X Your key that you should send to us: eycfs-50dsY-YiVip-GoP00X Within 1-2 days, we will send you a password and instructions for decryption. Copyring 2020-2021
Wallets

36bUzEo3hksCZfQ4GTCogZnWc5ZTTtv3MD

Targets

    • Target

      Word document.exe

    • Size

      860KB

    • MD5

      a1b86218cd460f7ec63bb0e8e97cacaf

    • SHA1

      2ced2422fa7d1bd36edb411d4881d0488d0ac71c

    • SHA256

      e858c09b00ed06ba71a17f4791b6264ab9cfac3dcc9d61df10f9b2a1e7b072e4

    • SHA512

      e467adac35d38b69d9a48f1cedb98b249c96c2412f9efd00bef6e680f3494d3c46c8ad83ab0e17462f2056cf91fd32e7707d1b4d4736aa515229359b115767c2

    Score
    10/10
    persistenceransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks