Overview

overview

10

Static

static

3

4ab0ae29c6...f6.exe

windows10-2004-x64

10

4ab0ae29c6...f6.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    bsast_22777638550.zip
  • Size 70KB
  • Sample250623-ehn6maxlt2
  • SHA256 fb4707fbd3096d5370f5fcc5d029b76ba9607f7c20dc1a320fd82ab6a109ee57
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
burandiscoveryransomware

Malware Config

Extracted

Path

  • C:\Users\README.TXT

  • buran

Ransom Note
  • YOUR FILES ARE ENCRYPTED Your files, documents, photos, databases and other important files are encrypted. You are not able to decrypt it by yourself! The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files. To be sure we have the decryptor and it works you can send an email: [email protected] and decrypt one file for free. But this file should be of not valuable! Do you really want to restore your files? Write to email: [email protected] Attention! * Do not rename encrypted files. * Do not try to decrypt your data using third party software, it may cause permanent data loss. * Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.

Targets

    • Target
      4ab0ae29c6ed5a3f2e0319992de812fc65be4048739c7f10c6f729fe4238abf6
    • Size 103KB
    • SHA256 4ab0ae29c6ed5a3f2e0319992de812fc65be4048739c7f10c6f729fe4238abf6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    burandiscoveryransomware

    • Buran

      Ransomware-as-a-service based on the VegaLocker family first identified in 2019.

      ransomwareburan

    • Buran family

      buran

    • Renames multiple (162) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks