Resubmissions

31-03-2024 14:56

240331-sa6ycsdg9y 10

27-03-2024 12:31

240327-pp4vrsfc3z 10

General

  • Target

    e1ac6283bd50e46c49ea0cfae49e4a8f

  • Size

    40KB

  • Sample

    240331-sa6ycsdg9y

  • MD5

    e1ac6283bd50e46c49ea0cfae49e4a8f

  • SHA1

    e0f4c6caf5e8b119a1b302591a39511872eb11cd

  • SHA256

    68ec37ccb2e6682f6f444b13b9d6f0098ef45774dcf856328d7c9af440891679

  • SHA512

    ca612f7b82e178feddaa14cdde0a1e25a65e5d1c0868ff39bb4db3447cba909ffa5bb813b8bf5ab038d33d45a7ea95de200cfd59d5cae890507aba8cc7556223

  • SSDEEP

    768:UzctJwrPdpe9rrG5XdO1AF97rds0/poHWFC6JORwxIpizMAO2:actJgPW9rrGNdO1AjvWqS246WNizg2

Score
10/10

Malware Config

Targets

    • Target

      e1ac6283bd50e46c49ea0cfae49e4a8f

    • Size

      40KB

    • MD5

      e1ac6283bd50e46c49ea0cfae49e4a8f

    • SHA1

      e0f4c6caf5e8b119a1b302591a39511872eb11cd

    • SHA256

      68ec37ccb2e6682f6f444b13b9d6f0098ef45774dcf856328d7c9af440891679

    • SHA512

      ca612f7b82e178feddaa14cdde0a1e25a65e5d1c0868ff39bb4db3447cba909ffa5bb813b8bf5ab038d33d45a7ea95de200cfd59d5cae890507aba8cc7556223

    • SSDEEP

      768:UzctJwrPdpe9rrG5XdO1AF97rds0/poHWFC6JORwxIpizMAO2:actJgPW9rrGNdO1AjvWqS246WNizg2

    Score
    10/10
    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks