General
-
Target
http://www.google.com/url?q=http%3A%2F%2Fcanarytokens.com%2Farticles%2Fterms%2Fimages%2F6273376tgy8lrrnek9ai08a01%2Fredirect.html&sa=D&sntz=1&usg=AOvVaw20yd4Y6H3K2osTQZlU8PMD
-
Sample
220321-h6e5eaaaa3
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://www.google.com/url?q=http%3A%2F%2Fcanarytokens.com%2Farticles%2Fterms%2Fimages%2F6273376tgy8lrrnek9ai08a01%2Fredirect.html&sa=D&sntz=1&usg=AOvVaw20yd4Y6H3K2osTQZlU8PMD
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
http://www.google.com/url?q=http%3A%2F%2Fcanarytokens.com%2Farticles%2Fterms%2Fimages%2F6273376tgy8lrrnek9ai08a01%2Fredirect.html&sa=D&sntz=1&usg=AOvVaw20yd4Y6H3K2osTQZlU8PMD
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\Users\Admin\AppData\Local\Temp\2924_2033805596\english_wikipedia.txt
prometheus
https
http
Targets
-
-
Target
http://www.google.com/url?q=http%3A%2F%2Fcanarytokens.com%2Farticles%2Fterms%2Fimages%2F6273376tgy8lrrnek9ai08a01%2Fredirect.html&sa=D&sntz=1&usg=AOvVaw20yd4Y6H3K2osTQZlU8PMD
Score10/10-
Prometheus Ransomware
Ransomware family mostly targeting manufacturing industry and claims to be affiliated with REvil.
-