11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394 | Triage

Sharing

General

Target

11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394.bin
Size

1.3MB
Sample

230328-jczgmabd6x
MD5

df134a54ae5dca7963e49d97dd104660
SHA1

9bddcce91756469051f2385ef36ba8171d99686d
SHA256

11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394
SHA512

9046be2d1af55141001c8f35b06af2607a329e3b4d97253972362ef4ffb61106be3bf6701cbcc36f1a39028c9f17d19b414f6ee63bc34e4622a5833752a17914
SSDEEP

24576:fsspRa70Hm5QQF0fTOOqs60utA+islfs/DHEj3TBi0mhwLlz2Ya60xchhH2yP1DF:f7W707QEpq3u+PkDHEj3TBi0mhwLlz2q

Score

8^/10

ransomware spyware stealer

Malware Config

Targets

- Target
  
  11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394.bin
- Size
  
  1.3MB
- MD5
  
  df134a54ae5dca7963e49d97dd104660
- SHA1
  
  9bddcce91756469051f2385ef36ba8171d99686d
- SHA256
  
  11ddebd9b22a3a21be11908feda0ea1e1aa97bc67b2dfefe766fcea467367394
- SHA512
  
  9046be2d1af55141001c8f35b06af2607a329e3b4d97253972362ef4ffb61106be3bf6701cbcc36f1a39028c9f17d19b414f6ee63bc34e4622a5833752a17914
- SSDEEP
  
  24576:fsspRa70Hm5QQF0fTOOqs60utA+islfs/DHEj3TBi0mhwLlz2Ya60xchhH2yP1DF:f7W707QEpq3u+PkDHEj3TBi0mhwLlz2q
Score

8^/10

ransomware spyware stealer
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

ransomwarespywarestealer

behavioral2

ransomwarespywarestealer