Overview

overview

10

Static

static

10

ab8c3898f4...a7.exe

windows7-x64

10

ab8c3898f4...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab8c3898f405f749d76f1f4d0b2edea7.bin

  • Size

    497KB

  • Sample

    240806-efnr3ssgph

  • MD5

    ab8c3898f405f749d76f1f4d0b2edea7

  • SHA1

    cd84e0d07ba9d0bb0533f22d769aa89c57df65ed

  • SHA256

    053406e3796af92592f6af6ab78ce2372f9521b3c9286314274bf85ce4221ba8

  • SHA512

    339e09fdc912f84c47f7243a1caecbaf4139e1e0643726a03f1f4c80c217d74bdff01bd5a6c6ef4b725992fc1b5961420400e6d67b3e47498c31dd909fb44c2f

  • SSDEEP

    6144:yHr9B5aj/BXUAHi8tbQxBDVC8NfjPiU0Ci/d+EmlXZCW+WWWpw4X3KSahv:Oaj/BXUA3tcbeU9CW+WWWZov

Score
10/10
chaosransomwarespywarestealer

Malware Config

Targets

    • Target

      ab8c3898f405f749d76f1f4d0b2edea7.bin

    • Size

      497KB

    • MD5

      ab8c3898f405f749d76f1f4d0b2edea7

    • SHA1

      cd84e0d07ba9d0bb0533f22d769aa89c57df65ed

    • SHA256

      053406e3796af92592f6af6ab78ce2372f9521b3c9286314274bf85ce4221ba8

    • SHA512

      339e09fdc912f84c47f7243a1caecbaf4139e1e0643726a03f1f4c80c217d74bdff01bd5a6c6ef4b725992fc1b5961420400e6d67b3e47498c31dd909fb44c2f

    • SSDEEP

      6144:yHr9B5aj/BXUAHi8tbQxBDVC8NfjPiU0Ci/d+EmlXZCW+WWWpw4X3KSahv:Oaj/BXUA3tcbeU9CW+WWWZov

    Score
    10/10
    chaosransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks