Overview

overview

10

Static

static

BlackSun.ps1

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    BlackSun.ps1
  • Size 56KB
  • Sample210921-nbjf8shce9
  • SHA256 e5429f2e44990b3d4e249c566fbf19741e671c0e40b809f87248d9ec9114bef9
  • MD5 SHA1 SHA512
Score
10/10
ransomwarespywarestealer

Malware Config

Extracted

Path

  • C:\Users\Admin\Desktop\BlackSun_README.txt

Ransom Note
  • *** BlackSun PROJECT *** All your data has been encrypted. Documents, photos, databases, backups. HOW CAN I GET MY DATA BACK? Your data is not destroyed. your data are however encrypted with SSL encryption, the only way to decrypt them is to have the decryption code and software. don't try to decrypt the files by yourself, you will damage them and make the recovery impossible. HOW CAN I GET THE DECRYPTION SOFTWARE? To get the software you will have to pay a certain amount of money. (10.000 euro in Monero Cryptocurrency) You need to contact us at this email: [email protected] and we will tell you how to pay. You have 10 days starting from now.

Targets

    • Target
      BlackSun.ps1
    • Size 56KB
    • SHA256 e5429f2e44990b3d4e249c566fbf19741e671c0e40b809f87248d9ec9114bef9
    • MD5 SHA1 SHA512
    Score
    10/10
    ransomwarespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks