Overview

overview

10

Static

static

10

2025-03-31...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-31_58276b228366e0cde9778a029cfec58a_destroyer_wannacry

  • Size

    21KB

  • Sample

    250331-s7alesvq18

  • MD5

    58276b228366e0cde9778a029cfec58a

  • SHA1

    5377435ad3ec0740e90c2356d3c110260dbf3699

  • SHA256

    e6ab5307c0bf08c44533f227dca42cef289beac8be32519d7ad7e03e8242a299

  • SHA512

    653bd6cfbfc027821f163f2616d8627ed7d45d22b5334923df455906e19f8a2e845d8b67779427823304bb26741e3e7a82d6f1c7b1a54ca5b625989462a071c6

  • SSDEEP

    384:q3MLWHn3kIxPScBp40jGoO7tJ9r91CzYvex:un3kIPBpXjgb9r9ikex

Score
10/10
chaosransomwarespywarestealer

Malware Config

Targets

    • Target

      2025-03-31_58276b228366e0cde9778a029cfec58a_destroyer_wannacry

    • Size

      21KB

    • MD5

      58276b228366e0cde9778a029cfec58a

    • SHA1

      5377435ad3ec0740e90c2356d3c110260dbf3699

    • SHA256

      e6ab5307c0bf08c44533f227dca42cef289beac8be32519d7ad7e03e8242a299

    • SHA512

      653bd6cfbfc027821f163f2616d8627ed7d45d22b5334923df455906e19f8a2e845d8b67779427823304bb26741e3e7a82d6f1c7b1a54ca5b625989462a071c6

    • SSDEEP

      384:q3MLWHn3kIxPScBp40jGoO7tJ9r91CzYvex:un3kIPBpXjgb9r9ikex

    Score
    10/10
    chaosransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Chaos family

      chaos

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks