Overview

overview

10

Static

static

10

ae7c868713...6e.exe

windows10-2004-x64

10

Resubmissions

09/10/2022, 16:22

221009-tvha6shcb310

03/05/2022, 14:19

220503-rmtm5ahaa710

Sharing

Copy URL Twitter E-mail

General

  • Target
    ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e
  • Size 543KB
  • Sample221009-tvha6shcb3
  • SHA256 ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blackbastaransomware

Malware Config

Extracted

Path

  • C:\readme.txt

Ransom Note
  • Your data are stolen and encrypted The data will be published on TOR website if you do not pay the ransom You can contact us and decrypt one file for free on this TOR site (you should download and install TOR browser first https://torproject.org) https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion:80/ Your company id for log in: ba7a7058-3531-4b67-bae6-d602e9110361
URLs

  • https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion:80/

Targets

    • Target
      ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e
    • Size 543KB
    • SHA256 ae7c868713e1d02b4db60128c651eb1e3f6a33c02544cc4cb57c3aa6c6581b6e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    blackbastaransomware

    • Black Basta

      A ransomware family targeting Windows and Linux ESXi first seen in February 2022.

      ransomwareblackbasta

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks