Overview

overview

10

Static

static

8

07033f9651...32.exe

windows7_x64

1

07033f9651...32.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07033f9651ac20238d1b8d7250b5c192e7feb0d58824c94f5aa7f73e8f650732

  • Size

    77KB

  • Sample

    210515-3wthzbs6kj

  • MD5

    bad79b86c2f3d83956e9a08b61132980

  • SHA1

    231ad94b025df294be95b168999759260a072bae

  • SHA256

    07033f9651ac20238d1b8d7250b5c192e7feb0d58824c94f5aa7f73e8f650732

  • SHA512

    bc846c2716b05092cef2ba5754522dcf49eef62645b33ee7c1e5d2a263c9bb86a0df69632df3bdd580ff288d9919a31c05ebb31ba75f1c2050f5a8702da70314

Score
10/10
badrabbitaspackv2ransomware

Malware Config

Targets

    • Target

      07033f9651ac20238d1b8d7250b5c192e7feb0d58824c94f5aa7f73e8f650732

    • Size

      77KB

    • MD5

      bad79b86c2f3d83956e9a08b61132980

    • SHA1

      231ad94b025df294be95b168999759260a072bae

    • SHA256

      07033f9651ac20238d1b8d7250b5c192e7feb0d58824c94f5aa7f73e8f650732

    • SHA512

      bc846c2716b05092cef2ba5754522dcf49eef62645b33ee7c1e5d2a263c9bb86a0df69632df3bdd580ff288d9919a31c05ebb31ba75f1c2050f5a8702da70314

    Score
    10/10
    badrabbitransomware

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

      ransomwarebadrabbit

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks