Overview

overview

10

Static

static

10

311edf744c...86.exe

windows7-x64

9

311edf744c...86.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    311edf744c2e90d7bfc550c893478f43d1d7977694d5dcecf219795f3eb99b86.zip
  • Size 92KB
  • Sample241106-hcksssvmfs
  • SHA256 bb176c4f2cbbe4f80f3efcde3121d0ec79a2c05f9825f20445cd0b34aa05e483
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
lockbitdiscoveryransomwarespywarestealer

Malware Config

Targets

    • Target
      311edf744c2e90d7bfc550c893478f43d1d7977694d5dcecf219795f3eb99b86.exe
    • Size 145KB
    • SHA256 311edf744c2e90d7bfc550c893478f43d1d7977694d5dcecf219795f3eb99b86
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    discoveryransomwarespywarestealer

    • Renames multiple (332) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks