Overview

overview

10

Static

static

992149ca22...a5.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    992149ca2244ebd9ec96f01f29c73acce0dc5af609734077aea5978b5ce203a5

  • Size

    2.1MB

  • Sample

    220906-qg4qgaaefp

  • MD5

    8cae61eff562d9b28d521900692bf516

  • SHA1

    a38dd36172e145186b776bea4f5f2773504c68b0

  • SHA256

    992149ca2244ebd9ec96f01f29c73acce0dc5af609734077aea5978b5ce203a5

  • SHA512

    ff21a35638aaef98cf95e776d67a89cdf8ce98fd17f5f5ad52ed89ffa1b022f2e928061efb1543cbb112f750f6002ef62e08a68b7d047d19959acb06ffbc8565

  • SSDEEP

    49152:amer6a3OsA3P+SJfWDzG5nEm6oPTOSi2z7BGsW:aHP3OP32SJODqKi6/IBGl

Score
10/10
jigsawpersistenceransomwarespywarestealer

Malware Config

Targets

    • Target

      992149ca2244ebd9ec96f01f29c73acce0dc5af609734077aea5978b5ce203a5

    • Size

      2.1MB

    • MD5

      8cae61eff562d9b28d521900692bf516

    • SHA1

      a38dd36172e145186b776bea4f5f2773504c68b0

    • SHA256

      992149ca2244ebd9ec96f01f29c73acce0dc5af609734077aea5978b5ce203a5

    • SHA512

      ff21a35638aaef98cf95e776d67a89cdf8ce98fd17f5f5ad52ed89ffa1b022f2e928061efb1543cbb112f750f6002ef62e08a68b7d047d19959acb06ffbc8565

    • SSDEEP

      49152:amer6a3OsA3P+SJfWDzG5nEm6oPTOSi2z7BGsW:aHP3OP32SJODqKi6/IBGl

    Score
    10/10
    jigsawpersistenceransomwarespywarestealer

    • Jigsaw Ransomware

      Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.

      ransomwarejigsaw

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks