Overview

overview

10

Static

static

1

bitdefende...ty.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bitdefender_tsecurity.exe

  • Size

    14.1MB

  • Sample

    240401-wehccabd23

  • MD5

    b193e93da8cb8fb53b3b4cdc081252d9

  • SHA1

    b0d9d7822414095e325d843df73cb13c4ac214b6

  • SHA256

    26fafb03090ce617b53d9b3f6038ba1726211cd77973c1df888fb7092fccb72e

  • SHA512

    7ad1c11cc4d9527df8cb95f9a21e60bf9015de6e8f7f9e43ed89161a77c4f424c7a2286b080e50559a1aa80294e8fe38758816e17fb022aa7c3de90c14c16525

  • SSDEEP

    393216:S6FaXw19Sf25WY27BRR8V9tz8SpNuGNvHqmbet:HFaA19S7Y27BM58ooixA

Score
10/10
chaosdiscoverypersistenceransomwarespywarestealer

Malware Config

Targets

    • Target

      bitdefender_tsecurity.exe

    • Size

      14.1MB

    • MD5

      b193e93da8cb8fb53b3b4cdc081252d9

    • SHA1

      b0d9d7822414095e325d843df73cb13c4ac214b6

    • SHA256

      26fafb03090ce617b53d9b3f6038ba1726211cd77973c1df888fb7092fccb72e

    • SHA512

      7ad1c11cc4d9527df8cb95f9a21e60bf9015de6e8f7f9e43ed89161a77c4f424c7a2286b080e50559a1aa80294e8fe38758816e17fb022aa7c3de90c14c16525

    • SSDEEP

      393216:S6FaXw19Sf25WY27BRR8V9tz8SpNuGNvHqmbet:HFaA19S7Y27BM58ooixA

    Score
    10/10
    chaosdiscoverypersistenceransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Downloads MZ/PE file

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks