5fc44c7342b84f50f24758e39c8848b2f0991e8817ef5465844f5f2ff6085a57 | Triage

Sharing

General

Target

5fc44c7342b84f50f24758e39c8848b2f0991e8817ef5465844f5f2ff6085a57
Size

717KB
Sample

221015-v4ahcsfhc6
MD5

8119c78b7cfb7d9ce37286ec9fc263e2
SHA1

986ba7a5714ad5b0de0d040d1c066389bcb81a67
SHA256

5fc44c7342b84f50f24758e39c8848b2f0991e8817ef5465844f5f2ff6085a57
SHA512

bcdf2516171527ef236c76de1e6eaf0539570be9d16d6252f3b8990417ba3e64556c1889b2b7ed879cda069e7471e1af92cf2e09c0b1db086043b70a7cbc953b
SSDEEP

12288:VvEo74Ro+OeO+OeNhBBhhBB1Xj2BV35CIunI0IuBwtks/2fhSMXlHphqlwL:VZ7uXj0JCIJuKF2fhSMXlJhaw

Score

9^/10

ransomware spyware stealer

Malware Config

Targets

- Target
  
  5fc44c7342b84f50f24758e39c8848b2f0991e8817ef5465844f5f2ff6085a57
- Size
  
  717KB
- MD5
  
  8119c78b7cfb7d9ce37286ec9fc263e2
- SHA1
  
  986ba7a5714ad5b0de0d040d1c066389bcb81a67
- SHA256
  
  5fc44c7342b84f50f24758e39c8848b2f0991e8817ef5465844f5f2ff6085a57
- SHA512
  
  bcdf2516171527ef236c76de1e6eaf0539570be9d16d6252f3b8990417ba3e64556c1889b2b7ed879cda069e7471e1af92cf2e09c0b1db086043b70a7cbc953b
- SSDEEP
  
  12288:VvEo74Ro+OeO+OeNhBBhhBB1Xj2BV35CIunI0IuBwtks/2fhSMXlHphqlwL:VZ7uXj0JCIJuKF2fhSMXlJhaw
Score

9^/10

ransomware spyware stealer
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Deletes backup catalog
  Uses wbadmin.exe to inhibit system recovery.
  ransomware
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

File Deletion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

ransomwarespywarestealer