General

  • Target

    7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e.bin

  • Size

    2.9MB

  • Sample

    220120-xnsp4sbbfm

  • MD5

    8e1f22dd9e809ead5e19b340b0c80cae

  • SHA1

    2a53525eeb7b76b3d1bfe40ac349446f2add8784

  • SHA256

    7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e

  • SHA512

    be15ca5203ea0a5ea8ac6459b9d47d74f36e5830a1545faf5b7e9697afa377c7cf7a1cc57358c62d35f5f67c03d71fbbaff25c6994c42ef08c469981e74b118b

Score
10/10

Malware Config

Extracted

Family

blackcat

Credentials
Attributes
  • enable_network_discovery

    true

  • enable_self_propagation

    true

  • enable_set_wallpaper

    true

  • extension

    wpzlbji

  • note_file_name

    RECOVER-${EXTENSION}-FILES.txt

  • note_full_text

    >> Introduction Important files on your system was ENCRYPTED and now they have have "${EXTENSION}" extension. In order to recover your files you need to follow instructions below. >> Sensitive Data Sensitive data on your system was DOWNLOADED and it will be PUBLISHED if you refuse to cooperate. Data includes: - Employees personal data, CVs, DL, SSN. - Complete network map including credentials for local and remote services. - Financial information including clients data, bills, budgets, annual reports, bank statements. - Complete datagrams/schemas/drawings for manufacturing in solidworks format - And more... >> CAUTION DO NOT MODIFY FILES YOURSELF. DO NOT USE THIRD PARTY SOFTWARE TO RESTORE YOUR DATA. YOU MAY DAMAGE YOUR FILES, IT WILL RESULT IN PERMANENT DATA LOSS. YOUR DATA IS STRONGLY ENCRYPTED, YOU CAN NOT DECRYPT IT WITHOUT CIPHER KEY. >> Recovery procedure Follow these simple steps to get in touch and recover your data: 1) Download and install Tor Browser from: https://torproject.org/ 2) Navigate to: http://2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onion/?access-key=${ACCESS_KEY}

rsa_pubkey.plain

Targets

    • Target

      7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e.bin

    • Size

      2.9MB

    • MD5

      8e1f22dd9e809ead5e19b340b0c80cae

    • SHA1

      2a53525eeb7b76b3d1bfe40ac349446f2add8784

    • SHA256

      7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e

    • SHA512

      be15ca5203ea0a5ea8ac6459b9d47d74f36e5830a1545faf5b7e9697afa377c7cf7a1cc57358c62d35f5f67c03d71fbbaff25c6994c42ef08c469981e74b118b

    Score
    1/10

MITRE ATT&CK Matrix

Tasks