Overview

overview

10

Static

static

Satan.exe

windows7_x64

10

Satan.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41323ea9d3dbc13504f318e7e33a30a65f4142e75b1179cb993f282931cc9b3e

  • Size

    140KB

  • Sample

    220708-g9x9qafcf6

  • MD5

    eff8f4b2e53079f80b5be2d0af0eab46

  • SHA1

    e143bb2be2c3f6988459607b6b522370fb46811f

  • SHA256

    41323ea9d3dbc13504f318e7e33a30a65f4142e75b1179cb993f282931cc9b3e

  • SHA512

    9210f9356ae18328a7ce52d96749fad14fe04a0707e9548180092267dc39bc248231ff7ba23b311762ffbd79d7dad6ea979038f6a879106277c5940231c92f6f

Score
10/10
satancryptorransomwarespywarestealer

Malware Config

Targets

    • Target

      Satan.exe

    • Size

      142KB

    • MD5

      4153cbc1f51bca54ba1e948a3653185b

    • SHA1

      090e58b0b9ce144598b375c0c206289308535ef3

    • SHA256

      cf12eca0e10dc3370d7917e7678dc09629240d3e7cc71c5ac0df68576bea0682

    • SHA512

      d1232323496022e2e48dfa372d9d3844ebd31a2390896bca3914d246666cc29a4019313acf23458c540baa07a261023adf46da5315d21ee0557a0b5eb406fb7f

    Score
    10/10
    satancryptorransomwarespywarestealer

    • SatanCryptor

      Golang ransomware first seen in early 2020.

      ransomwaresatancryptor

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks