General

  • Target

    https://cdn.discordapp.com/attachments/1308616008101269526/1310430117843046440/Chaos_Ransomware_Builder_v4.exe?ex=674530a6&is=6743df26&hm=77c5ef4ffed41ac87fab65e00e50e68702e6fc09940f8fb8fde82c3c6fbbcc0b&

  • Sample

    241125-ct72rsypar

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1308616008101269526/1310430117843046440/Chaos_Ransomware_Builder_v4.exe?ex=674530a6&is=6743df26&hm=77c5ef4ffed41ac87fab65e00e50e68702e6fc09940f8fb8fde82c3c6fbbcc0b&

    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Chaos family

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks