Overview

overview

10

Static

static

3

babuk_builder.zip

windows7-x64

10

babuk_builder.zip

windows10-2004-x64

1

Resubmissions

13-01-2025 11:25

250113-nje4sasnhl 3

13-01-2025 01:53

250113-ca7a5asnhk 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    babuk_builder.zip

  • Size

    4.8MB

  • Sample

    250113-ca7a5asnhk

  • MD5

    aee27a5ebedadf12beed294f59026162

  • SHA1

    fa5153b6011c578ce85c8c6d2a431ee9b8be03ec

  • SHA256

    82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550

  • SHA512

    74548443d979e4b07904ca6232df1d787fa7481bfb52dfdd0331882cb407ba73c0548ef8544c02ed2cb2d11401ae86c546875db4408127d30b862cb383da921a

  • SSDEEP

    98304:a7TUPOmgWEeBcQVltn58PsCYBy7PJUhfTJ2RMOMA8vNFDf8NCE3njOSLQJ0TsYnY:rFgaBcKltnOE7MPJUhLCMhN8NnjBEJYY

Score
10/10
babukdefense_evasiondiscoveryexecutionimpactransomware

Malware Config

Targets

    • Target

      babuk_builder.zip

    • Size

      4.8MB

    • MD5

      aee27a5ebedadf12beed294f59026162

    • SHA1

      fa5153b6011c578ce85c8c6d2a431ee9b8be03ec

    • SHA256

      82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550

    • SHA512

      74548443d979e4b07904ca6232df1d787fa7481bfb52dfdd0331882cb407ba73c0548ef8544c02ed2cb2d11401ae86c546875db4408127d30b862cb383da921a

    • SSDEEP

      98304:a7TUPOmgWEeBcQVltn58PsCYBy7PJUhfTJ2RMOMA8vNFDf8NCE3njOSLQJ0TsYnY:rFgaBcKltnOE7MPJUhLCMhN8NnjBEJYY

    Score
    10/10
    babukdefense_evasiondiscoveryexecutionimpactransomware

    • Babuk Locker

      RaaS first seen in 2021 initially called Vasa Locker.

      ransomwarebabuk

    • Babuk family

      babuk

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Renames multiple (245) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks