General

  • Target

    88cd2481233b1dd3815ec0d0e8b57c00d723740fc80dee63514cbf0b7d23d35a

  • Size

    26KB

  • Sample

    221201-bxghjsfg81

  • MD5

    c386897ef6826fd5f479d92ecf313d83

  • SHA1

    08ecd789704ac7925484ce40262f497302e1a047

  • SHA256

    88cd2481233b1dd3815ec0d0e8b57c00d723740fc80dee63514cbf0b7d23d35a

  • SHA512

    784e466a671ed3b063c71fafe105db33bad3a643d433f17d55bbe88aa943752890b53f95ce3abbc2502ae532a932f25a367b61c8bec589dfa4f9c1f87d2f9743

  • SSDEEP

    768:J1IQT3WyVUuNtuuuuuNuuuOuNtuuuuuNuuuzDQY7wo4ymRA6:1S8D3mRA6

Malware Config

Targets

    • Target

      88cd2481233b1dd3815ec0d0e8b57c00d723740fc80dee63514cbf0b7d23d35a

    • Size

      26KB

    • MD5

      c386897ef6826fd5f479d92ecf313d83

    • SHA1

      08ecd789704ac7925484ce40262f497302e1a047

    • SHA256

      88cd2481233b1dd3815ec0d0e8b57c00d723740fc80dee63514cbf0b7d23d35a

    • SHA512

      784e466a671ed3b063c71fafe105db33bad3a643d433f17d55bbe88aa943752890b53f95ce3abbc2502ae532a932f25a367b61c8bec589dfa4f9c1f87d2f9743

    • SSDEEP

      768:J1IQT3WyVUuNtuuuuuNuuuOuNtuuuuuNuuuzDQY7wo4ymRA6:1S8D3mRA6

    • Drops file in Drivers directory

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks