General

  • Target

    7447526172.zip

  • Size

    10KB

  • Sample

    220520-qkmlcsgdhn

  • MD5

    97be1a60229d8045096a023d6c9bb086

  • SHA1

    d366c6b956fd4991b9b0bf970d325a8ec24f74a6

  • SHA256

    93bc55b5b7bb7651a194acafb39e39c21798eaa0c75fd463be751d76774034e8

  • SHA512

    39106d69a2b8df5e2d27626c8fcf13c62d841136d459036c9a32ebf47aefd78ad38c9e2e727960a0ae3a379f8036fd23ce6d051f67469d078cff3ca228c87bf8

Malware Config

Extracted

Path

C:\Users\Admin\Music\AddApprove.html

Family

ryuk

Ransom Note
<EncryptedKey>DWqsCE+0IaE/8ub17f/WHXQzPl+1SrrDph3neHAO+iVp1xGO1Q6U8bdr6XyPwXqSq+K5cGqckC65K1ft/SpKUBXKeLs/c3LQorxjWpFnGw0QGCgJQJtjVeAkd6uIoREKvRGa7lg7IVrt1jPewLcYknR5fUbZp3wErWEMO8w0xyw=<EncryptedKey>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

Targets

    • Target

      954d8fcd6b74d76999f9ec033ca855ffdab6595be23039f03bc4c6017fa3932c

    • Size

      22KB

    • MD5

      a4ac3f1674f24c6e596bf71fc47bd275

    • SHA1

      24dbe7a81a5bda771d7557fa3f5000f4a9f27179

    • SHA256

      954d8fcd6b74d76999f9ec033ca855ffdab6595be23039f03bc4c6017fa3932c

    • SHA512

      d75690b60afbc2999d5f2892b6ee924b902a1497f9820393c78edd64c061908462e98593267836bdab28bb9963fc30b4e780f0c7b5853fd067765e3a6df0bdc7

    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Ryuk

      Ransomware distributed via existing botnets, often Trickbot or Emotet.

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Modifies boot configuration data using bcdedit

    • Deletes backup catalog

      Uses wbadmin.exe to inhibit system recovery.

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix ATT&CK v6

Execution

Command-Line Interface

1
T1059

Defense Evasion

File Deletion

3
T1107

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Impact

Inhibit System Recovery

4
T1490

Tasks