Resubmissions

10-04-2023 00:41

230410-a1vznsfh8v 9

10-04-2023 00:38

230410-ay6y6aea89 10

General

  • Target

    https://raw.githubusercontent.com/Endermanch/MalwareDatabase/master/jokes/Time.zip

  • Sample

    230410-ay6y6aea89

Malware Config

Targets

    • Target

      https://raw.githubusercontent.com/Endermanch/MalwareDatabase/master/jokes/Time.zip

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

    • mimikatz is an open source tool to dump credentials on Windows

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks