Overview

overview

10

Static

static

10

2023-02-08...in.exe

windows7-x64

3

2023-02-08...in.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-02-08_ca1e56a26f9b7b8e18a5f627bd946d53_zeppelin.exe

  • Size

    2.6MB

  • Sample

    230209-rykjlafh2t

  • MD5

    ca1e56a26f9b7b8e18a5f627bd946d53

  • SHA1

    80f9a9afa9a115acabd32ddbd0339a17d261e90c

  • SHA256

    4ded976d2e5474b5ce1562ceb032981e23f170e7d6ec07fadd131aea82715a5a

  • SHA512

    d48549c184754f7d7e3c5b35c14aab50766aaa00eb8ce62d326a44ce9ccfc0b40bc94e33fa00c8b7594dfc0585f0c6530597d1222d8cb03edcb701de203af679

  • SSDEEP

    12288:jOU/d7WQvyPWa4DQFu/U3buRKlemZ9DnGAevjdMOU/d7WQvyPWa4DQFu/U3buRKO:7/JRyuN5e/JRyuN

Score
10/10
zeppelinransomware

Malware Config

Targets

    • Target

      2023-02-08_ca1e56a26f9b7b8e18a5f627bd946d53_zeppelin.exe

    • Size

      2.6MB

    • MD5

      ca1e56a26f9b7b8e18a5f627bd946d53

    • SHA1

      80f9a9afa9a115acabd32ddbd0339a17d261e90c

    • SHA256

      4ded976d2e5474b5ce1562ceb032981e23f170e7d6ec07fadd131aea82715a5a

    • SHA512

      d48549c184754f7d7e3c5b35c14aab50766aaa00eb8ce62d326a44ce9ccfc0b40bc94e33fa00c8b7594dfc0585f0c6530597d1222d8cb03edcb701de203af679

    • SSDEEP

      12288:jOU/d7WQvyPWa4DQFu/U3buRKlemZ9DnGAevjdMOU/d7WQvyPWa4DQFu/U3buRKO:7/JRyuN5e/JRyuN

    Score
    10/10
    zeppelinransomware

    • Detects Zeppelin payload

    • Zeppelin Ransomware

      Ransomware-as-a-service (RaaS) written in Delphi and first seen in 2019.

      ransomwarezeppelin
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks