Overview

overview

10

Static

static

3

what-encrypt.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    what-encrypt.exe

  • Size

    263KB

  • Sample

    240624-nmq1fstbqj

  • MD5

    d61c38b3d1ba714b8455eb2cf6021bac

  • SHA1

    3d81c5d0643886d4cf3d358e274c7fbb83f72021

  • SHA256

    ad533886f13a9753d17974ad2836712504e59460675f354d7d84329b157df08c

  • SHA512

    42b36e010d534a7b975fee95707172fa63dd466bfad6adb38c401098911a5beb6accd5c6972a3b859ae0938e894524bcdb1dbc68d96214bf9412b7108885ce49

  • SSDEEP

    6144:hLP6qRuHl7BuEHwRgDDQWC+H6fqmt3N5bJEjJ:hOqwHltucwRM4FjJE

Score
10/10
chaosransomware

Malware Config

Targets

    • Target

      what-encrypt.exe

    • Size

      263KB

    • MD5

      d61c38b3d1ba714b8455eb2cf6021bac

    • SHA1

      3d81c5d0643886d4cf3d358e274c7fbb83f72021

    • SHA256

      ad533886f13a9753d17974ad2836712504e59460675f354d7d84329b157df08c

    • SHA512

      42b36e010d534a7b975fee95707172fa63dd466bfad6adb38c401098911a5beb6accd5c6972a3b859ae0938e894524bcdb1dbc68d96214bf9412b7108885ce49

    • SSDEEP

      6144:hLP6qRuHl7BuEHwRgDDQWC+H6fqmt3N5bJEjJ:hOqwHltucwRM4FjJE

    Score
    10/10
    chaosransomware

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks