Overview

overview

10

Static

static

3

46afbb7804...56.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    46afbb780469fd2a5819a9d9ab9d30d2a0d463ff02e6638790624cf326e68b56
  • Size 997KB
  • Sample250521-vy2dwseq4x
  • SHA256 46afbb780469fd2a5819a9d9ab9d30d2a0d463ff02e6638790624cf326e68b56
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ouroborosdefense_evasiondiscoveryransomware

Malware Config

Targets

    • Target
      46afbb780469fd2a5819a9d9ab9d30d2a0d463ff02e6638790624cf326e68b56
    • Size 997KB
    • SHA256 46afbb780469fd2a5819a9d9ab9d30d2a0d463ff02e6638790624cf326e68b56
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    ouroborosdefense_evasiondiscoveryransomware

    • Ouroboros family

      ouroboros

    • Ouroboros/Zeropadypt

      Ransomware family based on open-source CryptoWire.

      ransomwareouroboros

    • Modifies Windows Firewall

      defense_evasion

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks