Resubmissions

23/02/2024, 17:14

240223-vr1h1seg8z10

23/02/2024, 17:12

240223-vq45taeg8t1

23/02/2024, 17:03

240223-vk48madg458

23/02/2024, 17:03

240223-vkpsyaeg2s1

23/02/2024, 16:59

240223-vhmkssef7z6

23/02/2024, 16:49

240223-vbvmtsde5810

23/02/2024, 16:45

240223-t9wgcade264

23/02/2024, 16:38

240223-t5gsdsdd246

23/02/2024, 16:35

240223-t3x2ladc796

23/02/2024, 16:33

240223-t22ndsec5v1

General

  • Target
    MalwareDatabase
  • Size 285KB
  • Sample240223-vbvmtsde58
  • SHA256 3cc951ba5d33757ea90766b47a7174ed5b1c7600f5f47d418e3b1fcfabe54f7e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      MalwareDatabase
    • Size 285KB
    • SHA256 3cc951ba5d33757ea90766b47a7174ed5b1c7600f5f47d418e3b1fcfabe54f7e
    • MD5 SHA1 SHA512 SSDEEP
    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

    • mimikatz is an open source tool to dump credentials on Windows

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks