Overview

overview

8

Static

static

3

RER_Change...-_.rar

windows10-2004-x64

1

RER_Change...-_.rar

windows11-21h2-x64

1

MD5/QuickSFV.exe

windows10-2004-x64

3

MD5/QuickSFV.exe

windows11-21h2-x64

3

MD5/QuickSFV.ini

windows10-2004-x64

1

MD5/QuickSFV.ini

windows11-21h2-x64

3

MD5/fitgirl-bins.md5

windows10-2004-x64

3

MD5/fitgirl-bins.md5

windows11-21h2-x64

3

Verify BIN...on.bat

windows10-2004-x64

3

Verify BIN...on.bat

windows11-21h2-x64

3

fg-03.bin

windows10-2004-x64

3

fg-03.bin

windows11-21h2-x64

3

setup.exe

windows10-2004-x64

7

setup.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    RER_Changed_Setup_Files_Only_--_fitgirl-repacks.site_--_.rar
  • Size 330.5MB
  • Sample260523-dcd8sses5w
  • SHA256 19c898876e63b37b86fa7d865e28d63e17bf2227cea73b52b690b6054e49692c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryinstallerransomware

Malware Config

Targets

    • Target
      RER_Changed_Setup_Files_Only_--_fitgirl-repacks.site_--_.rar
    • Size 330.5MB
    • SHA256 19c898876e63b37b86fa7d865e28d63e17bf2227cea73b52b690b6054e49692c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      MD5/QuickSFV.EXE
    • Size 101KB
    • SHA256 a6371461da7439f4ef7008ed53331209747cba960b85c70a902d46451247a29c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      MD5/QuickSFV.ini
    • Size 155B
    • SHA256 74ca5a42469197eded04f5a0bf34ca251c72f7cc06a3416ac035230cb8e81629
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    ransomware
    behavioral5behavioral6
    • Target
      MD5/fitgirl-bins.md5
    • Size 363B
    • SHA256 d3084afccf8963bb58aaf9dede02cc9b619eed037e7e5159da49cae2786e472e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral7behavioral8
    • Target
      Verify BIN files before installation.bat
    • Size 69B
    • SHA256 95ff8038ebfcdbdbf8fbfd047447b0418e960c2a2dcb20515ee3c5e8349a5540
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      fg-03.bin
    • Size 324.6MB
    • SHA256 f39a4db1627aa594014f9a9f1c6dc33e15e83f3a8bb82402dc0769b6a76badb1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral11behavioral12
    • Target
      setup.exe
    • Size 5.8MB
    • SHA256 bf75518b2957b04bab5db3e95d92e9446362d3798b0b293cacc287166b1f5c86
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryinstaller

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks