Resubmissions

27/10/2022, 16:11

221027-tm2pvacfh910

23/10/2022, 23:24

221023-3d7deadchp8

General

  • Target
    435a917a2ad1adbe35e97247d7c2dc0d50be12b2d1a311d5b2a7b28dd315fc33.bin.sample
  • Size 225KB
  • Sample221023-3d7deadchp
  • SHA256 435a917a2ad1adbe35e97247d7c2dc0d50be12b2d1a311d5b2a7b28dd315fc33
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      435a917a2ad1adbe35e97247d7c2dc0d50be12b2d1a311d5b2a7b28dd315fc33.bin.sample
    • Size 225KB
    • SHA256 435a917a2ad1adbe35e97247d7c2dc0d50be12b2d1a311d5b2a7b28dd315fc33
    • MD5 SHA1 SHA512 SSDEEP
    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks