Resubmissions

03-12-2024 21:44

241203-1lfvba1ncp 6

19-10-2024 22:38

241019-2kv4aavgnm 3

19-08-2024 01:19

240819-bpr93szapm 3

19-08-2024 00:51

240819-a7mlwavcqg 10

19-08-2024 00:48

240819-a5824avcka 6

19-08-2024 00:44

240819-a3nndavara 10

19-08-2024 00:41

240819-a12gfsvaja 7

19-08-2024 00:39

240819-azr7dsthlh 8

19-08-2024 00:02

240819-abjkcasema 6

19-08-2024 00:00

240819-aas3dswaqk 1

General

  • Target

    https://github.com/Endermanch/MalwareDatabase

  • Sample

    240818-zrw8taxblk

Malware Config

Targets

    • Target

      https://github.com/Endermanch/MalwareDatabase

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

    • mimikatz is an open source tool to dump credentials on Windows

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks