Overview

overview

10

Static

static

d21aef628f...95.exe

windows7_x64

3

d21aef628f...95.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d21aef628fbb7f3ac19b13c3a10f838179798a2c442c26bf68fd444e9c5d3095

  • Size

    788KB

  • Sample

    210515-qafenaevq2

  • MD5

    bf7a7748c4499a6d44c688ba37896a53

  • SHA1

    45c68363fdb2eeae08c827307206f6f9fe7bf944

  • SHA256

    d21aef628fbb7f3ac19b13c3a10f838179798a2c442c26bf68fd444e9c5d3095

  • SHA512

    60089da79f1b8e72ce6e0ebcfc9fac7e3b1b82cc49b64be89556b4c89b4b117db95c158eb6126be2a3291a22cca5640ffe5f4710f0a3fab42ac40d8151ec4602

Score
10/10
badrabbitransomware

Malware Config

Targets

    • Target

      d21aef628fbb7f3ac19b13c3a10f838179798a2c442c26bf68fd444e9c5d3095

    • Size

      788KB

    • MD5

      bf7a7748c4499a6d44c688ba37896a53

    • SHA1

      45c68363fdb2eeae08c827307206f6f9fe7bf944

    • SHA256

      d21aef628fbb7f3ac19b13c3a10f838179798a2c442c26bf68fd444e9c5d3095

    • SHA512

      60089da79f1b8e72ce6e0ebcfc9fac7e3b1b82cc49b64be89556b4c89b4b117db95c158eb6126be2a3291a22cca5640ffe5f4710f0a3fab42ac40d8151ec4602

    Score
    10/10
    badrabbitransomware

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

      ransomwarebadrabbit

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks