General

  • Target

    250215-wcw3qawnfz_pw_infected.zip

  • Size

    80KB

  • Sample

    250215-wj3tvawpbq

  • MD5

    573647deb0a51937b18e53330ab9c90e

  • SHA1

    26bbf8de6205c4c61cf2e43587fabe6bb697df94

  • SHA256

    e85edff8c33d7b79baaca5de020e60c9df41f953ec54aae8f87bd893fc10bee4

  • SHA512

    4a5fab083cda3b462d2b2669a398464dff1adf046e3cc97d333a7c3f21cee2cea3fed92c4fdc5df561d271b51ed188d8206ca3c6c5a44d14e35305ea7eb65713

  • SSDEEP

    1536:SUo8h1PHqPfs1VeOGEbgDpMS+gyDtmG2Y0I/ZinW78SGz5E:fo8hpHGk1EcMDi/LDMYhhoxz5E

Malware Config

Targets

    • Target

      BloodEagleRansomwareBuilder.exe

    • Size

      683KB

    • MD5

      bd74ac3a184b41087eaffe1c4e5575f1

    • SHA1

      dcf0cc5cf9d633f398bda7821bb04b89ac60870d

    • SHA256

      87675dc68eac28c09af5658389267f7160d34865aaa4d2abaf4f127432333bcc

    • SHA512

      bed0db9ed78e0459b151849b6c04ed626a664b6779fdce3b5ccdced5dc06c2eea208b08dc1cf153a6781587c45fba3d92a8f5a27952c58fcace27330a75d9526

    • SSDEEP

      3072:hL6xoPurnfsj7A0H7GMgXuD//bFLAkC3IGYWEyNakhm5Zt1HrTM/rFLjZkJ:8kj0aGMVFLQJPJUEFL2

    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Chaos family

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks