Overview

overview

8

Static

static

regolamento.bin.exe

windows7_x64

8

regolamento.bin.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    regolamento.bin.zip

  • Size

    154KB

  • Sample

    211126-q1x22afhf6

  • MD5

    74412ef1d9c5dbf37ea31e103be125fd

  • SHA1

    112d68bc8850f6cef623a63a368a90d4fb920782

  • SHA256

    15a3129f051ad017ee69714a834e3c3dbec9c9e334662090864e5056affc1c3b

  • SHA512

    69067a3029c1ea50d9feefd9c83b5ef151484c21c8a2b42790680cef3c4fd78618c03b3d9bde3bd8882a0c78a5acf47c5a954c1cf2ca014bb738aaaedae30583

Score
8/10
ransomwarespywarestealer

Malware Config

Targets

    • Target

      regolamento.bin

    • Size

      391KB

    • MD5

      5644517be1634a30b9c32c75d52c7aa6

    • SHA1

      5047b5d7e2f352e9ba6efe47e6bc805550d3552d

    • SHA256

      b034243fc2a42e0c5dd70de9fa6c16d13fc1702330d68d3f885213064fd722d2

    • SHA512

      a173922181e5890ac0723c51cb724c7d2885892d925314d08c4203d5e0aef5af746f42bde6e94566aaba3cd3bde623457b3f5a3b6d00abafee952de0daacba84

    Score
    8/10
    ransomwarespywarestealer

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks