Overview

overview

10

Static

static

10

42e978a513...92.exe

windows7-x64

1

42e978a513...92.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    42e978a513d1bce5d9b837029a3f280220d7cabb7be556c6ee2a9e8113fd0c92
  • Size 4.6MB
  • Sample240101-pjt4daafgr
  • SHA256 42e978a513d1bce5d9b837029a3f280220d7cabb7be556c6ee2a9e8113fd0c92
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
snatchransomware

Malware Config

Extracted

Path

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\HOW TO RESTORE YOUR FILES.TXT

Ransom Note
  • Hello! All your files are encrypted, write to me if you want to return your files - I can do it very quickly! Contact me by email: [email protected] or [email protected] The subject line must contain an encryption extension or the name of your company! Do not rename encrypted files, you may lose them forever. You may be a victim of fraud. Free decryption as a guarantee. Send us up to 3 files for free decryption. The total file size should be no more than 1 MB! (not in the archive), and the files should not contain valuable information. (databases, backups, large Excel spreadsheets, etc.) !!! Do not turn off or restart the NAS equipment. This will lead to data loss !!! To contact us, we recommend that you create an email address at protonmail.com or tutanota.com Because gmail and other public email programs can block our messages!

Targets

    • Target
      42e978a513d1bce5d9b837029a3f280220d7cabb7be556c6ee2a9e8113fd0c92
    • Size 4.6MB
    • SHA256 42e978a513d1bce5d9b837029a3f280220d7cabb7be556c6ee2a9e8113fd0c92
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    ransomware

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks