General

  • Target

    fd38135703ae116b97b4b0bc6725b70fd6cf669eaa26ac949163c80541452006

  • Size

    4.5MB

  • Sample

    221107-jq6svshcak

  • MD5

    8c6c20872fa86464f5b08fc736c373f1

  • SHA1

    1a32650d8017387716478223097806a8c1310984

  • SHA256

    fd38135703ae116b97b4b0bc6725b70fd6cf669eaa26ac949163c80541452006

  • SHA512

    3e9564be303dc94fb270791d736f4bfffcf93a2e7e1f04d6ce6ab2b659341b641ab56688d12b260a7f910238e7ccc0470332c53b54f9970f54fd38dee9dc7fec

  • SSDEEP

    98304:R3im0g+zEN2uNy6n4NMp9VeEQQD+t0DCZFOs:xUgHgvNiTV31+t0D0F

Score
10/10

Malware Config

Extracted

Path

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\HOW TO RESTORE YOUR FILES.TXT

Ransom Note
Dear Management! We inform you that your network has undergone a penetration test, during which we encrypted your files and downloaded more than 280 GB of your data (most from your PD), including: Confidentional documents Copy of some mailboxes Accounting Databases backups Marketing data Important! Do not try to decrypt the files yourself or using third-party utilities. The only program that can decrypt them is our decryptor, which you can request from the contacts below. Any other program will only damage files in such a way that it will be impossible to restore them. You can get all the necessary evidence, discuss with us possible solutions to this problem and request a decryptor by using the contacts below. Please be advised that if we don't receive a response from you within 3 days, we reserve the right to publish files to the public. Contact us: candice.wood@post.cz or candice.wood@swisscows.email Additional ways to communicate in tox chat tox id: 83E6E3CFEC0E4C8E7F7B6E01F6E86CF70AE8D4E75A59126A2C52FE9F568B4072CA78EF2B3C97 =========================================================== Customer service TOX ID: 0FF26770BFAEAD95194506E6970CC1C395B04159038D785DE316F05CE6DE67324C6038727A58 Only emergency! Use if support is not responding
Emails

candice.wood@post.cz

candice.wood@swisscows.email

Targets

    • Target

      fd38135703ae116b97b4b0bc6725b70fd6cf669eaa26ac949163c80541452006

    • Size

      4.5MB

    • MD5

      8c6c20872fa86464f5b08fc736c373f1

    • SHA1

      1a32650d8017387716478223097806a8c1310984

    • SHA256

      fd38135703ae116b97b4b0bc6725b70fd6cf669eaa26ac949163c80541452006

    • SHA512

      3e9564be303dc94fb270791d736f4bfffcf93a2e7e1f04d6ce6ab2b659341b641ab56688d12b260a7f910238e7ccc0470332c53b54f9970f54fd38dee9dc7fec

    • SSDEEP

      98304:R3im0g+zEN2uNy6n4NMp9VeEQQD+t0DCZFOs:xUgHgvNiTV31+t0D0F

    Score
    10/10

MITRE ATT&CK Matrix

Tasks