Resubmissions

15/06/2026, 16:42

260615-t7qs3sc12z10

29/12/2023, 16:37

231229-t4vmvseccm1

29/12/2023, 16:36

231229-t4n53shfa71

29/12/2023, 16:30

231229-tz8zpahfa310

07/12/2022, 15:20

221207-sq511afc3810

11/03/2022, 16:29

220311-tzk8madceq10

11/03/2022, 16:29

220311-tzg6zaacb61

04/06/2021, 11:31

210604-wjcgrmw7fe10

03/06/2021, 17:10

210603-ha3r6tyzpj10

03/06/2021, 16:17

210603-j3xhhrl8fe10

General

  • Target
    filecoder.dmg
  • Size 2.5MB
  • Sample221207-sq511afc38
  • SHA256 f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path
  • /Users/run/Documents/README!.txt

Ransom Note
  • NOT YOUR LANGUAGE? USE https://translate.google.com What happened to your files ? All of your files were protected by a strong encryption method. What do I do ? So , there are two ways you can choose: wait for a miracle or start obtaining BITCOIN NOW! , and restore YOUR DATA the easy way If You have really valuable DATA, you better NOT WASTE YOUR TIME, because there is NO other way to get your files, except make a PAYMENT FOLLOW THESE STEPS: 1) learn how to buy bitcoin https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version) 2)send 0.25 BTC to 1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb 3)send your btc address and your ip (you can get your ip here https://www.whatismyip.com) via mail to [email protected] 4)leave your computer on and connected to the internet for the next 24 hours after payment, your files will be unlocked. (If you can not wait 24 hours make a payment of 0.45 BTC your files will be unlocked in max 10 minutes) KEEP IN MIND THAT YOUR DECRYPTION KEY WILL NOT BE STORED ON MY SERVER FOR MORE THAN 1 WEEK SINCE YOUR FILE GET CRYPTED,THEN THERE WON'T BE ANY METHOD TO RECOVER YOUR FILES, DON'T WASTE YOUR TIME!
Wallets
  • 1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb

URLs
  • https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version

  • https://www.whatismyip.com

Targets

    • Target
      filecoder.dmg
    • Size 2.5MB
    • SHA256 f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks