General

  • Target

    dead.7z

  • Size

    1.3MB

  • Sample

    220508-jlyaxseeer

  • MD5

    e34a27319d3b8e1db6278e254838eb0d

  • SHA1

    e131e651ed84b2bd0f339efdb5db4a95ba772ceb

  • SHA256

    16aba772af1763cce32eae03538f38efb716a8ed36e81ca6a2b4da2db8dbdbae

  • SHA512

    9a394bb62affd28b2077300b493bff9e41f4c4f220b5a9d6ddff5492cb54ac27f65dc327aa71c00a5788e5549c3763c548ef8065b03f02433e394a5089666f60

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\readme.txt

Ransom Note
All of your files have been encrypted Your computer was infected with a ransomware virus. Your files have been encrypted and you won't be able to decrypt them without our help. What can I do to get my files back? You can buy our special decryption software, this software will allow you to recover all of your data and remove the ransomware from your computer.The price for the software is depend. Payment can be made by buying hack and send to me only. How do I pay, where i can buy hack? This one only need the hack from any game (personal fav: Geometry Dash, Minecraft, Roblox, Cookie Run) For Minecraft, there're many hack include: Vape V4, Astolfo + Astolfo: https://www.astolfo.lgbt/ + Vape V4: vape.gg For Geometry Dash, only Mega Hack V7 (Mega Hack Pro): https://absolllute.com/store/view_mega_hack_pro For Roblox, there're many like: Synapse X, Script-Ware,... + Synapse X: https://x.synapse.to/ + Script-Ware: https://script-ware.com/ (Windows or iOS) + Protosmasher: https://protosmasher.net/ (dead) For Cookie Run, please no, i don't need right now. (its not worth it, and not avilable, easy to get banned) Note: JUST ONE HACK, NOT MORE. After you bought one of them, send it via: Discord: Danet#7950 Email: bangthlu2@gmail.com I AM THE LAWYER, MY FILE IS ENCRYPTED, NOW GIVE ME BACK- Woah woah woah slow down, i'm sorry lawyer... but you have to proof us you're lawyer and we'll give you an decrypter, good luck. Your public key: uDfsiP4lI2xvhOW/dgdxwvPOOrzBDylv3PcJAXYJh4PZOJaDroaKkDmOQFj2+HXDxd07H6Waqw3v2/y08F/aCiXNwza+600sUYkwxQ7HmyHt+z1q5Me6uVQnbuzbtKqCte2sjAtIxwgcob72cmkTR9ToXrlDYy/6jt8aumzzuRM=
Emails

bangthlu2@gmail.com

URLs

https://www.astolfo.lgbt/

https://absolllute.com/store/view_mega_hack_pro

https://x.synapse.to/

https://script-ware.com/

https://protosmasher.net/

Extracted

Path

C:\Users\Admin\AppData\Roaming\InstallRename.html

Family

ryuk

Ransom Note
<EncryptedKey>czvUAhRQMF3V6a3WJ22HWq3v7c0yjFrQUFm/8OmTmC/OVMicEtddAyPck8nd/ssAAM0rP8KUzBJn/aS9cM1zkJQXY6b2grUs6+erE91ZSzmA7gPUo3gOScsF8HJ1noBkGME8ut7UPTdTV5ausEXGrX9yECsr9dhPxKueYtUIbrI=<EncryptedKey>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

Targets

    • Target

      dead.exe

    • Size

      2.2MB

    • MD5

      b3b5313f4d4d239f5d22a84ef29eb892

    • SHA1

      ac0dd7326305bfee3d19b31ee56c9cbc9b3253f5

    • SHA256

      7df566bbfebbfb07e45989d68668365c56d17d55b013bb30c58de0485d337067

    • SHA512

      c68ead18d282247be06d05c235dc7c07ab9871358b42e9f5756aa2e43bc694dd34a5288b65d1d4d9a0092ca162f3c9aa8d7ca5f6b47ed46973a31b6334a8ba57

    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Ryuk

      Ransomware distributed via existing botnets, often Trickbot or Emotet.

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Modifies boot configuration data using bcdedit

    • Deletes backup catalog

      Uses wbadmin.exe to inhibit system recovery.

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

MITRE ATT&CK Matrix ATT&CK v6

Execution

Command-Line Interface

1
T1059

Defense Evasion

File Deletion

3
T1107

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Impact

Inhibit System Recovery

4
T1490

Defacement

1
T1491

Tasks