General

  • Target

    1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1.sample

  • Size

    214KB

  • Sample

    210726-w6prk1lc96

  • MD5

    6627486ab7443b9867e274355651c071

  • SHA1

    389f9b6d6b8d3dff216b0d008990e16db25fdcf7

  • SHA256

    1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1

  • SHA512

    e91f05843cc777a3b5ba28c7841c0076de64c1f9bb025646fa5df589d97f898b1c4aedcfddad74566cef7858ebaba065dfada041b0d334fd45f51a8939becca0

Score
10/10

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\_readme.txt

Ransom Note
All Your Files Are Encrypted BY Yarraq Ransomware Don’t Worry, you can return all your files.All your files like documents, photos, databases and other important are encrypted. What Guarantees do we give to you ? You can send one of your encrypted file and we decrypt it for free. You must follow these steps To Decrypt your files : 1) Send $2000 bitcoin to wallet : BTC Wallet: 1LLubVvDAXd3RoSAKUFbLdv4EAWH37NEcu 2) write on our e-mail : cyborgyarraq@protonmail.ch
Emails

cyborgyarraq@protonmail.ch

Wallets

1LLubVvDAXd3RoSAKUFbLdv4EAWH37NEcu

Targets

    • Target

      1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1.sample

    • Size

      214KB

    • MD5

      6627486ab7443b9867e274355651c071

    • SHA1

      389f9b6d6b8d3dff216b0d008990e16db25fdcf7

    • SHA256

      1bdbb1f54354640bd65ec045ce886ab963d80fa2a96503f16f54f25484759ed1

    • SHA512

      e91f05843cc777a3b5ba28c7841c0076de64c1f9bb025646fa5df589d97f898b1c4aedcfddad74566cef7858ebaba065dfada041b0d334fd45f51a8939becca0

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Tasks