Resubmissions

21-08-2024 16:23

240821-tvvaqssbrl 10

21-08-2024 15:52

240821-ta3rda1blk 10

22-01-2022 14:10

220122-rgn6fsbfgr 10

General

  • Target

    666 virus.exe

  • Size

    517KB

  • Sample

    240821-ta3rda1blk

  • MD5

    df0edf8b66d6a09c96802357d088d31b

  • SHA1

    4018b609ef6e77c63c4028a12ca66051379b0633

  • SHA256

    3bd7ba1da919719a36e943d1c84a3b976a57d7f4d279b3e81f821f2a5a2e7c40

  • SHA512

    ee67b4e8465118b70820c7048620e82799c447d80f5d0dc97162c94ad7ce26ced0f273d6f18601be8cbf8340066755cff131563d4333bbc7258885addbf436db

  • SSDEEP

    6144:5r9dgxk4gq1z3PX0VP6NaoME0JKeTl0sVSiQYuOk4aqawwwWQG+DBjwww2Ay:MkVq1z/X0VP6NaoMEQl0xYuPNiG+1A

Malware Config

Targets

    • Target

      666 virus.exe

    • Size

      517KB

    • MD5

      df0edf8b66d6a09c96802357d088d31b

    • SHA1

      4018b609ef6e77c63c4028a12ca66051379b0633

    • SHA256

      3bd7ba1da919719a36e943d1c84a3b976a57d7f4d279b3e81f821f2a5a2e7c40

    • SHA512

      ee67b4e8465118b70820c7048620e82799c447d80f5d0dc97162c94ad7ce26ced0f273d6f18601be8cbf8340066755cff131563d4333bbc7258885addbf436db

    • SSDEEP

      6144:5r9dgxk4gq1z3PX0VP6NaoME0JKeTl0sVSiQYuOk4aqawwwWQG+DBjwww2Ay:MkVq1z/X0VP6NaoMEQl0xYuPNiG+1A

    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks