Overview

overview

10

Static

static

3

VencordIns...1).exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    VencordInstaller (1).exe
  • Size 9.9MB
  • Sample240909-twftqszepa
  • SHA256 dc0826657a005009f43bdc3a0933d08352f8b22b2b9b961697a2db6e9913e871
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
badrabbitmimikatzdiscoveryransomware

Malware Config

Targets

    • Target
      VencordInstaller (1).exe
    • Size 9.9MB
    • SHA256 dc0826657a005009f43bdc3a0933d08352f8b22b2b9b961697a2db6e9913e871
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    badrabbitmimikatzdiscoveryransomware

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

      ransomwarebadrabbit

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

      mimikatz

    • mimikatz is an open source tool to dump credentials on Windows

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks