Analysis

  • max time kernel
    54s
  • max time network
    57s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    29-04-2022 11:30

General

  • Target

    a7f09cfde433f3d47fc96502bf2b623ae5e7626da85d0a0130dcd19d1679af9b.exe

  • Size

    26KB

  • MD5

    cf6ff9e0403b8d89e42ae54701026c1f

  • SHA1

    a4f5cb11b9340f80a89022131fb525b888aa8bc6

  • SHA256

    a7f09cfde433f3d47fc96502bf2b623ae5e7626da85d0a0130dcd19d1679af9b

  • SHA512

    dca369de908ff4d8a6b095243d8837ad9eb885c78544565586196451f99303e9beb8635e01254514b485f22298b3eaf69afb3666b6032959ae3e9567e78dc575

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\readme.txt

Ransom Note
All of your files are currently encrypted by ONYX strain. As you already know, all of your data has been encrypted by our software. It cannot be recovered by any means without contacting our team directly. DON'T TRY TO RECOVER your data by yourselves. Any attempt to recover your data (including the usage of the additional recovery software) can damage your files. However, if you want to try - we recommend choosing the data of the lowest value. DON'T TRY TO IGNORE us. We've downloaded a pack of your internal data and are ready to publish it on our news website if you do not respond. So it will be better for both sides if you contact us as soon as possible. DON'T TRY TO CONTACT feds or any recovery companies. We have our informants in these structures, so any of your complaints will be immediately directed to us. So if you will hire any recovery company for negotiations or send requests to the FBI, we will consider this as a hostile intent and initiate the publication of whole compromised data immediately. To prove that we REALLY CAN get your data back - we offer you to decrypt two random files completely free of charge. You can contact our team directly for further instructions through our website : TOR VERSION : (you should download and install TOR browser first https://torproject.org) http://ibpwmfrlbwkfd4asg57t4x2vkrczuq3uhrfxf6y35xoalwjlztil54ad.onion Login: ampkcz Password: fgh5RgsW73F YOU SHOULD BE AWARE! We will speak only with an authorized person. It can be the CEO, top management, etc. In case you are not such a person - DON'T CONTACT US! Your decisions and action can result in serious harm to your company! Inform your supervisors and stay calm!
URLs

http://ibpwmfrlbwkfd4asg57t4x2vkrczuq3uhrfxf6y35xoalwjlztil54ad.onion

Extracted

Path

C:\Users\Admin\Downloads\HideClose.mht

Family

ryuk

Ransom Note
<EncryptedKey>o2+Wu9XfN8/Hq3m1lOu54euzBj1IeKxn/VyqW6+o/Gi788QP65uLhLjUhsHz6negwrskd6XwAnwBKS5Tcjgqgf9d2/2/MoE2sMEZuJabXw5qHZdl3jwCXhstOWjI/26ZJFLkatd0sH23JT1sYKuMPgImw0oNdHLpvOM/UsYJanc=<EncryptedKey>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

Extracted

Path

C:\Users\Admin\AppData\Roaming\CompleteRead.mht

Family

ryuk

Ransom Note
<EncryptedKey>ROTmqEa/iuLRxJ2Ak7/F9OR0mGJTAXOp7t3jhMV4sQ8LI7Ski005kqF/WO0H8JQJU7JOYxI5lR1cizi4PXTy3ug5IS2ovYUVziNOP+e9Q9ml3NHL9p87OT9+hd3rTjRsSxXTHD32oS7SssdJ/f4B3tFvQwK+RzWW8NL6/+L60Sk=<EncryptedKey>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

Signatures

  • Chaos

    Ransomware family first seen in June 2021.

  • Chaos Ransomware 3 IoCs
  • Ryuk

    Ransomware distributed via existing botnets, often Trickbot or Emotet.

  • Executes dropped EXE 1 IoCs
  • Modifies extensions of user files 3 IoCs

    Ransomware generally changes the extension on encrypted files.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file 4 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops desktop.ini file(s) 33 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies registry class 1 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 47 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a7f09cfde433f3d47fc96502bf2b623ae5e7626da85d0a0130dcd19d1679af9b.exe
    "C:\Users\Admin\AppData\Local\Temp\a7f09cfde433f3d47fc96502bf2b623ae5e7626da85d0a0130dcd19d1679af9b.exe"
    1⤵
    • Checks computer location settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4216
    • C:\Users\Admin\AppData\Roaming\svchost.exe
      "C:\Users\Admin\AppData\Roaming\svchost.exe"
      2⤵
      • Executes dropped EXE
      • Modifies extensions of user files
      • Checks computer location settings
      • Drops startup file
      • Drops desktop.ini file(s)
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4252
      • C:\Windows\system32\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Roaming\readme.txt
        3⤵
        • Opens file in notepad (likely ransom note)
        PID:4140

Network

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Collection

Data from Local System

1
T1005

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\readme.txt
    Filesize

    1KB

    MD5

    b402046c86e08ea9c4b10b7557ba3d44

    SHA1

    2db4472bd804e9732801d4b9aab6fb7ada46f4e6

    SHA256

    82086da6a81e6606c29af9744461ccbdf6735cb1c3899383c83d07253426944f

    SHA512

    eca57607191fc0bcb39c69f80e8c7601cf7268c596e5d6d5f262e7bbc70dd6e4c8d2d490af3c4b841d8fb4b94d7c069ab33c345f70a93652f3ffa2e62b9a6e75

  • C:\Users\Admin\AppData\Roaming\svchost.exe
    Filesize

    26KB

    MD5

    cf6ff9e0403b8d89e42ae54701026c1f

    SHA1

    a4f5cb11b9340f80a89022131fb525b888aa8bc6

    SHA256

    a7f09cfde433f3d47fc96502bf2b623ae5e7626da85d0a0130dcd19d1679af9b

    SHA512

    dca369de908ff4d8a6b095243d8837ad9eb885c78544565586196451f99303e9beb8635e01254514b485f22298b3eaf69afb3666b6032959ae3e9567e78dc575

  • C:\Users\Admin\AppData\Roaming\svchost.exe
    Filesize

    26KB

    MD5

    cf6ff9e0403b8d89e42ae54701026c1f

    SHA1

    a4f5cb11b9340f80a89022131fb525b888aa8bc6

    SHA256

    a7f09cfde433f3d47fc96502bf2b623ae5e7626da85d0a0130dcd19d1679af9b

    SHA512

    dca369de908ff4d8a6b095243d8837ad9eb885c78544565586196451f99303e9beb8635e01254514b485f22298b3eaf69afb3666b6032959ae3e9567e78dc575

  • memory/4140-136-0x0000000000000000-mapping.dmp
  • memory/4216-130-0x0000000000180000-0x000000000018C000-memory.dmp
    Filesize

    48KB

  • memory/4216-131-0x00007FF84DFA0000-0x00007FF84EA61000-memory.dmp
    Filesize

    10.8MB

  • memory/4252-132-0x0000000000000000-mapping.dmp
  • memory/4252-135-0x00007FF84DFA0000-0x00007FF84EA61000-memory.dmp
    Filesize

    10.8MB