General
-
Target
ransomware_notes-main.zip
-
Size
741KB
-
Sample
240720-zmpm6swhlg
-
MD5
96aa10f49edd9a7ccb2a95fe1d70ec43
-
SHA1
4d049d508c9797e2b8fd2dd21d54f865fa5da7eb
-
SHA256
3404fd569d0704f96ae32f8deb46a557b84c17a549e7878d68b0958c09d5f7f0
-
SHA512
db0faa39d6281ecd35549cf449e486303c4ac9828784c876391761cb8c149d1f3060756afac987c4bf7030d22fff15c07440323fd6e6b6116c1dda7d01a8ad04
-
SSDEEP
12288:InvyL4m7By20SeXpwvh6cSfRLF+77+chT43A8aGo2BK3rfHW7ueFi:6G4m7Bl0Se6Sf5s7WA8aoMrf2SeFi
Behavioral task
behavioral1
Sample
ransomware_notes-main.zip
Resource
win11-20240709-en
Malware Config
Extracted
atomsilo
Email:[email protected]
http://mhdehvkomeabau7gsetnsrhkfign4jgnx3wajth5yb5h6kvzbd72wlqd.onion
Extracted
http://sdjf982lkjsdvcjlksaf2kjhlksvvnktyoiasuc92lf.onion
Extracted
Extracted
Extracted
1PAFdD9fwqRWG4VcCGuY27VTW8xPZmuF1D
Extracted
http://lorenzezzwvtk3y24wfph4jpho27grrctqvf6yvld7256rnoz7yg2eid.onion
http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion
Extracted
medusalocker
Extracted
quantum
http://wxxp3rny7w3j6gkel56iomdw2ztfzqxlsdw3fyezrnohgh767bau6dqd.onion/?cid=[snip]
Extracted
http://s2wk77h653qn54csf4gp52orhem4y72dgxsquxulf255pcymazeepbyd.onion/
Extracted
http://o6pi3u67zyag73ligtsupin5rjkxpfrbofwoxnhimpgpfttxqu7lsuyd.onion
Targets
-
-
Target
ransomware_notes-main.zip
-
Size
741KB
-
MD5
96aa10f49edd9a7ccb2a95fe1d70ec43
-
SHA1
4d049d508c9797e2b8fd2dd21d54f865fa5da7eb
-
SHA256
3404fd569d0704f96ae32f8deb46a557b84c17a549e7878d68b0958c09d5f7f0
-
SHA512
db0faa39d6281ecd35549cf449e486303c4ac9828784c876391761cb8c149d1f3060756afac987c4bf7030d22fff15c07440323fd6e6b6116c1dda7d01a8ad04
-
SSDEEP
12288:InvyL4m7By20SeXpwvh6cSfRLF+77+chT43A8aGo2BK3rfHW7ueFi:6G4m7Bl0Se6Sf5s7WA8aoMrf2SeFi
Score10/10-
Avaddon
Ransomware-as-a-service first released in June 2020 and currently expanding its userbase among criminal actors.
-
Drops file in System32 directory
-