General

  • Target

    9ec26a6c6fb70f06dae7d10de0f4a51c6e3b36cd0d8072068b4abc9a93f9b8e1

  • Size

    3.9MB

  • Sample

    221020-j5svjsdacn

  • MD5

    fcf60247b76ebd52d7a265434e57619a

  • SHA1

    08f9aafc93253a657890230a15e7ef98ad607c44

  • SHA256

    9ec26a6c6fb70f06dae7d10de0f4a51c6e3b36cd0d8072068b4abc9a93f9b8e1

  • SHA512

    7881642ab1b4dab79e6e3799cd008730d0c1c52d8ec628175cd7661821674b7ffd4d56a52422621622df3062f04028086bb7254662f8b083e69962a0b19154b3

  • SSDEEP

    49152:cOY2LO1j7EshuX+2o3e7ecmnG53J9yC092ihp7I02Ulz4kJ3Fy01Lb4aJrSPD+X:JY2UfG+IGG+zhp7Jzpz2

Score
10/10

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\HOW TO RESTORE YOUR FILES.TXT

Ransom Note
Dear Management CMHA We inform you that your network has undergone a penetration test, during which we encrypted your files and downloaded more than 300 GB of your data (most from your PD), including: Accounting Confidential documents Personal data Copy of some mailboxes Important! Do not try to decrypt the files yourself or using third-party utilities. The only program that can decrypt them is our decryptor, which you can request from the contacts below. Any other program will only damage files in such a way that it will be impossible to restore them. You can get all the necessary evidence, discuss with us possible solutions to this problem and request a decryptor by using the contacts below. Please be advised that if we don't receive a response from you within 3 days, we reserve the right to publish files to the public. Contact us: [email protected] or [email protected] Additional ways to communicate in tox chat tox id:83E6E3CFEC0E4C8E7F7B6E01F6E86CF70AE8D4E75A59126A2C52FE9F568B4072CA78EF2B3C97 =========================================================== Customer service TOX ID: 0FF26770BFAEAD95194506E6970CC1C395B04159038D785DE316F05CE6DE67324C6038727A58 Only emergency! Use if support is not responding

Targets

    • Target

      9ec26a6c6fb70f06dae7d10de0f4a51c6e3b36cd0d8072068b4abc9a93f9b8e1

    • Size

      3.9MB

    • MD5

      fcf60247b76ebd52d7a265434e57619a

    • SHA1

      08f9aafc93253a657890230a15e7ef98ad607c44

    • SHA256

      9ec26a6c6fb70f06dae7d10de0f4a51c6e3b36cd0d8072068b4abc9a93f9b8e1

    • SHA512

      7881642ab1b4dab79e6e3799cd008730d0c1c52d8ec628175cd7661821674b7ffd4d56a52422621622df3062f04028086bb7254662f8b083e69962a0b19154b3

    • SSDEEP

      49152:cOY2LO1j7EshuX+2o3e7ecmnG53J9yC092ihp7I02Ulz4kJ3Fy01Lb4aJrSPD+X:JY2UfG+IGG+zhp7Jzpz2

    Score
    10/10

MITRE ATT&CK Matrix

Tasks