Resubmissions

09/06/2024, 21:39

240609-1h2ydafh9310

09/06/2024, 15:20

240609-sqrhlsce799

General

  • Target
    ransom.exe
  • Size 8.4MB
  • Sample240609-sqrhlsce79
  • SHA256 294cca25a52a8ce7764f2504e1f65ad3ee0dd8d2e701bc910d12c2e24fb367d0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      ransom.exe
    • Size 8.4MB
    • SHA256 294cca25a52a8ce7764f2504e1f65ad3ee0dd8d2e701bc910d12c2e24fb367d0
    • MD5 SHA1 SHA512 SSDEEP
    • Renames multiple (320) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks