General

  • Target

    ranzomware.zip

  • Size

    524B

  • Sample

    230327-3m252shg41

  • MD5

    e8376f0c3ebbc28144ef40453c563370

  • SHA1

    91efa1481b11230f374c494f116cbce078947c2d

  • SHA256

    da18f877a9e00463bc59236c3f4c7b93bd964b67aa6f7628a240df84c8a07971

  • SHA512

    590af65d0346273c23d0e6474b7bc1765ab43af449c135d3dff4641849c53727effe7b82c417c782a0e066844e271fd157a6ec8086f628a736b659a832b2a1c0

Malware Config

Targets

    • Target

      ranzomware.zip

    • Size

      524B

    • MD5

      e8376f0c3ebbc28144ef40453c563370

    • SHA1

      91efa1481b11230f374c494f116cbce078947c2d

    • SHA256

      da18f877a9e00463bc59236c3f4c7b93bd964b67aa6f7628a240df84c8a07971

    • SHA512

      590af65d0346273c23d0e6474b7bc1765ab43af449c135d3dff4641849c53727effe7b82c417c782a0e066844e271fd157a6ec8086f628a736b659a832b2a1c0

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks