Overview

overview

10

Static

static

3

6b468da05c...a0.exe

windows7-x64

10

6b468da05c...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0

  • Size

    6.0MB

  • Sample

    240529-hg3jeaef29

  • MD5

    b60ea71b7edf7afa6cfb09a02709407c

  • SHA1

    5f97a95cc05036e9c030583c2ee5648229cc9160

  • SHA256

    6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0

  • SHA512

    03a3d78fd9397523f794710f965c8c388c482ad5c9bef459efedcc8dc24b30f9df5c35f9b572c7b9d6a1e13cedd9af68af8e935d300438f5efdd7144b4685a3f

  • SSDEEP

    98304:5DYEWTnV7e9yUXMJ/1o1gLWMV99zw0RlPB6I/KIxAQGT1A0AWYOTsKkXHr:5UEWTnVyAnOzMVjH6WKQG5A0SKCL

Score
10/10
clopransomware

Malware Config

Extracted

Family

clop

Ransom Note
___ Universidad de La Salle ___ === DO NOT ATTEMPT TO RESTORE OR MOVE THE FILES YOURSELF. THIS MAY DESTROY THEM === Here are some of the files we downloaded from your network: \\172.19.20.216\C$\Users\ruthrodriguezez \\172.19.0.25\Secretaria General Docs \\172.19.15.59\C$\Users\sarangel If you refuse to cooperate, all data will be published for free download on our portal: http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/ -> TOR browser CONTACT US BY EMAIL-> [email protected] or [email protected] OR WRITE TO THE CHAT AT-> http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/93868e77-1331-411a-9643-dc9ad26a5095?secret=lasalle (use TOR browser)

Targets

    • Target

      6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0

    • Size

      6.0MB

    • MD5

      b60ea71b7edf7afa6cfb09a02709407c

    • SHA1

      5f97a95cc05036e9c030583c2ee5648229cc9160

    • SHA256

      6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0

    • SHA512

      03a3d78fd9397523f794710f965c8c388c482ad5c9bef459efedcc8dc24b30f9df5c35f9b572c7b9d6a1e13cedd9af68af8e935d300438f5efdd7144b4685a3f

    • SSDEEP

      98304:5DYEWTnV7e9yUXMJ/1o1gLWMV99zw0RlPB6I/KIxAQGT1A0AWYOTsKkXHr:5UEWTnVyAnOzMVjH6WKQG5A0SKCL

    Score
    10/10
    clopransomware

    • clop

      Ransomware discovered in early 2019 which has been actively developed since release.

      ransomwareclop
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks