Overview

overview

10

Static

static

10

343cb2d590...35.exe

windows7-x64

1

343cb2d590...35.exe

windows10-2004-x64

1

46cd508b7e...ed.exe

windows7-x64

1

46cd508b7e...ed.exe

windows10-2004-x64

1

a9741b16f4...95.exe

windows7-x64

1

a9741b16f4...95.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    possible_irt_clop_16938601753.zip

  • Size

    1.5MB

  • Sample

    240501-swv3zscc48

  • MD5

    02056feea8f2155557af5b3353edf1ec

  • SHA1

    90729b415824023eae259502d23f3190c5af0f5e

  • SHA256

    7fa55a34462cbef893741a513c78e13c8c8a48a1f7e7c7ad498422ae576d1fea

  • SHA512

    5505e146998723c9ddf95bd1e14b0ac2ff168e91445d8dc6d37bb38af2d5f8486c5d6fd39ac2c314b42757c136370d80731ff7efa2f47db32794fe86b527a639

  • SSDEEP

    24576:AxXLTOKkyJ1Cns71H5ibY3L5ptoVJAgpzspNwNXF5s6YCUra8FA3f5tH3lkbXHiG:A9LTOKB3f1ZiOpWXAgpsgN5YbuA2j1w1

Score
10/10
clop

Malware Config

Extracted

Family

clop

Ransom Note
___ CGMINC ___ === DO NOT ATTEMPT TO RESTORE OR MOVE THE FILES YOURSELF. THIS MAY DESTROY THEM === Here are some of the files we downloaded from your network: \\CGMFILE02\F$\ETCLifeline\Packages \\CGMFILE01\E$\ETCLifeline\Packages \\CGMSQL07\H$\SqlData\20220925\ApiLogDb.mdf If you refuse to cooperate, all data will be published for free download on our portal: http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/ -> TOR browser CONTACT US BY EMAIL-> [email protected] or [email protected] OR WRITE TO THE CHAT AT-> http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/feeb65cb-ef79-48c2-8a53-23e1f844fe72?secret=cgminc (use TOR browser)

Targets

    • Target

      343cb2d5900f5fe4abd5442a4a18541753fbb6ca5ff4ee7f2c312ed96e413335

    • Size

      1.0MB

    • MD5

      1e98a8d79ed7afbd77f6536dd7b4398f

    • SHA1

      a074790705ecbede2e67cced4bcb62d833d828a5

    • SHA256

      343cb2d5900f5fe4abd5442a4a18541753fbb6ca5ff4ee7f2c312ed96e413335

    • SHA512

      8bebdba0fdabfcff0b26dafc3b1a71ec50ba0e551bb8a3a82f91c91a1cdc09b6dfe87373c7966c01777265143a32d34bb760e9d4d9e968e3820f5370d95c99f5

    • SSDEEP

      24576:xnuZd8go15167wsK3IPDvN1vDgvRE2qQWhZyWsshlrN36Fl09YSO/k:5kd8goP1CwsSIjTvDg5E2qBhfssTrN3L

    Score
    1/10
    behavioral1behavioral2

    • Target

      46cd508b7e77bb2c1d47f7fef0042a13c516f8163f9373ef9dfac180131c65ed

    • Size

      743KB

    • MD5

      f59d2a3c925f331aae7437dd7ac1a7c8

    • SHA1

      40b7b386c2c6944a6571c6dcfb23aaae026e8e82

    • SHA256

      46cd508b7e77bb2c1d47f7fef0042a13c516f8163f9373ef9dfac180131c65ed

    • SHA512

      04e0165e9b029b28c2d86659f99cb3d01246995fc4125548f68877c545daa20b36aa4824f59fc387a35a8390d6a1fe390812d38f9a3b545b61877df27d975ca5

    • SSDEEP

      12288:srSPZ0yEmwXpaYcV9/H3a3jAX1lo+PJeyzOFHBBJJOi/9/AGrib4NufaWpMG8SJN:sGPKyhYp/u/H3ijALpPJmljl9/ATpMb8

    Score
    1/10
    behavioral3behavioral4

    • Target

      a9741b16f4169f56ae0f2e49c87f3c5360ed5ab4370e6d16bd86179999f11795

    • Size

      936KB

    • MD5

      8bd774fbc6f846992abda69ddabc3fb7

    • SHA1

      a6e940b1bd92864b742fbd5ed9b2ef763d788ea7

    • SHA256

      a9741b16f4169f56ae0f2e49c87f3c5360ed5ab4370e6d16bd86179999f11795

    • SHA512

      037c1f895d3bb44e5f37abec7202325639d6414cab71df88663b573a04a5f8d9cd3f5939fdcfdec995cec35f6e3ed2f905b78270522ffdd98f7e2a93106d6480

    • SSDEEP

      24576:zw71/dET5/y1ufQfvDN3y60HyOci+MIjxnGxs:Q1FWq1ufwrVy60HWMIVGK

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix

Tasks