chaos

General

Target

2024-06-01_f086fab4e2d6de8255df5a06e0983f4a_destroyer_wannacry
Size

22KB
Sample

240601-zv8e9aeh7t
MD5

f086fab4e2d6de8255df5a06e0983f4a
SHA1

501c65650b6815fd837f64ce398ff4d8382475e5
SHA256

897be7be189a1e444c44535b7dd1f967ff7eb49bec25367efcbed724c76efffb
SHA512

9c9ef27dc35f684a0d55f3202887a06ae8cb956e154795802034b9add97dbf5faf337680acb6fa96f3f2250cbe5f4f90caa47d9d43e550368b2b3d0403a40a53
SSDEEP

384:e3Mg/bqo2v4Ahp2XTpFZ3OjvJsr91CSYvEe5:cqo2FaDpjOjBsr9W8e5

Score

10^/10

Malware Config

Targets

- Target
  
  2024-06-01_f086fab4e2d6de8255df5a06e0983f4a_destroyer_wannacry
- Size
  
  22KB
- MD5
  
  f086fab4e2d6de8255df5a06e0983f4a
- SHA1
  
  501c65650b6815fd837f64ce398ff4d8382475e5
- SHA256
  
  897be7be189a1e444c44535b7dd1f967ff7eb49bec25367efcbed724c76efffb
- SHA512
  
  9c9ef27dc35f684a0d55f3202887a06ae8cb956e154795802034b9add97dbf5faf337680acb6fa96f3f2250cbe5f4f90caa47d9d43e550368b2b3d0403a40a53
- SSDEEP
  
  384:e3Mg/bqo2v4Ahp2XTpFZ3OjvJsr91CSYvEe5:cqo2FaDpjOjBsr9W8e5
Score

10^/10

chaos defense_evasion evasion execution impact ransomware spyware stealer
- Chaos
  Ransomware family first seen in June 2021.
  ransomware chaos
- Chaos Ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Detects command variations typically used by ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Renames multiple (189) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Deletes backup catalog
  Uses wbadmin.exe to inhibit system recovery.
  ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
behavioral1 behavioral2