Overview

overview

8

Static

static

1

11ddebd9b2...94.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9738756587.zip

  • Size

    695KB

  • Sample

    230327-rqnw2sfh6z

  • MD5

    631193d05551c83e67aa01cc0beec9b8

  • SHA1

    0180c9b1e4a4f2acefc26f3ebd6843f0a214930f

  • SHA256

    c330b5c16a9c1231c84bedac24875b99e0aa1c41fa3e91ba9942d4be887b0a85

  • SHA512

    436c6a28897511c1094c832a6a41f6a9a78a3c7d1963c610994efefa9c4f007f1a429194019b3bc3cd9216a98feb631d949fa66433dbad54cb836daf6c71e2d3

  • SSDEEP

    12288:3okxU7VUGENm6kYFMHB2bvxtNA9Y80UQ4i0jVaYNt82OxPOL0Mi7NNf/BqUUzd:4LVuVsCvxQizGPj7NW2Oly0Mi7NNfUUU

Score
8/10
ransomwarespywarestealer

Malware Config

Targets

    • Target

      11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394

    • Size

      1.3MB

    • MD5

      df134a54ae5dca7963e49d97dd104660

    • SHA1

      9bddcce91756469051f2385ef36ba8171d99686d

    • SHA256

      11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394

    • SHA512

      9046be2d1af55141001c8f35b06af2607a329e3b4d97253972362ef4ffb61106be3bf6701cbcc36f1a39028c9f17d19b414f6ee63bc34e4622a5833752a17914

    • SSDEEP

      24576:fsspRa70Hm5QQF0fTOOqs60utA+islfs/DHEj3TBi0mhwLlz2Ya60xchhH2yP1DF:f7W707QEpq3u+PkDHEj3TBi0mhwLlz2q

    Score
    8/10
    ransomwarespywarestealer

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks