Overview

overview

10

Static

static

3

10bce0ff65...da.exe

windows7-x64

10

10bce0ff65...da.exe

windows10-1703-x64

10

10bce0ff65...da.exe

windows10-2004-x64

10

Resubmissions

28/02/2024, 18:31

240228-w6jpgsah6710

28/02/2024, 18:30

240228-w5h2kaag7s10

28/02/2024, 18:29

240228-w5en5sag6y

11/01/2024, 08:38

240111-kj2e8sddf810

11/01/2024, 08:35

240111-kg362sddb710

26/07/2021, 12:39

210726-18w9pcbxzs10

Sharing

Copy URL Twitter E-mail

General

  • Target
    10bce0ff6597f347c3cca8363b7c81a8bff52d2ff81245cd1e66a6e11aeb25da.sample
  • Size 1.3MB
  • Sample240111-kj2e8sddf8
  • SHA256 10bce0ff6597f347c3cca8363b7c81a8bff52d2ff81245cd1e66a6e11aeb25da
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
dearcrypersistenceransomwarespywarestealer

Malware Config

Extracted

Path

  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\DesktopSharingHub\readme.txt

  • dearcry

Ransom Note
  • Your file has been encrypted! If you want to decrypt, please contact us. [email protected] or [email protected] And please send me the following hash! 2133c369fb115ea61eebd7b62768decf

Targets

    • Target
      10bce0ff6597f347c3cca8363b7c81a8bff52d2ff81245cd1e66a6e11aeb25da.sample
    • Size 1.3MB
    • SHA256 10bce0ff6597f347c3cca8363b7c81a8bff52d2ff81245cd1e66a6e11aeb25da
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    dearcryransomwarespywarestealerpersistence

    • DearCry

      DearCry is a ransomware first seen after the 2021 Microsoft Exchange hacks.

      ransomwaredearcry

    • Renames multiple (3375) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Modifies Installed Components in the registry

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks