Overview

overview

10

Static

static

1

verify-ua.html

windows7-x64

3

verify-ua.html

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    verify-ua

  • Size

    5KB

  • Sample

    240909-z4zjpsseqf

  • MD5

    bdcd890677a32b056ffd78cd896eff89

  • SHA1

    92ab74ed8d40e336c4c33a44435521f377007df8

  • SHA256

    1041a83d20c8cb7b9303c65aa563078dc4b10e6db8f3547b74278bc6c0644e98

  • SHA512

    3bedc2cec5f892c688811feaacff43845762be06e212510cba9abd9080ffa849c46ca2566722ab3f2c25afda3cb9baaa5e78e1e6c8351ea41eb3add49e75cc01

  • SSDEEP

    96:GiOts4fcZxpPsCkHInCnir7NVirCQXqHVoITMF6apE4sW:7Ots5sGnRTirio6+sW

Score
10/10
badrabbitmimikatzdiscoverypersistenceransomware

Malware Config

Targets

    • Target

      verify-ua

    • Size

      5KB

    • MD5

      bdcd890677a32b056ffd78cd896eff89

    • SHA1

      92ab74ed8d40e336c4c33a44435521f377007df8

    • SHA256

      1041a83d20c8cb7b9303c65aa563078dc4b10e6db8f3547b74278bc6c0644e98

    • SHA512

      3bedc2cec5f892c688811feaacff43845762be06e212510cba9abd9080ffa849c46ca2566722ab3f2c25afda3cb9baaa5e78e1e6c8351ea41eb3add49e75cc01

    • SSDEEP

      96:GiOts4fcZxpPsCkHInCnir7NVirCQXqHVoITMF6apE4sW:7Ots5sGnRTirio6+sW

    Score
    10/10
    discoverybadrabbitmimikatzpersistenceransomware

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

      ransomwarebadrabbit

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

      mimikatz

    • mimikatz is an open source tool to dump credentials on Windows

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks