Overview

overview

6

Static

static

3

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows11-ltsc_2024-x64

1

ReadyOrNot...ix.ini

windows10-2004-x64

1

ReadyOrNot...ix.ini

windows11-ltsc_2024-x64

1

ReadyOrNot...ix.url

windows10-2004-x64

6

ReadyOrNot...ix.url

windows11-ltsc_2024-x64

6

ReadyOrNot...64.dll

windows10-2004-x64

1

ReadyOrNot...64.dll

windows11-ltsc_2024-x64

1

ReadyOrNot...ng.dll

windows10-2004-x64

3

ReadyOrNot...ng.dll

windows11-ltsc_2024-x64

3

ReadyOrNot...ng.dll

windows10-2004-x64

3

ReadyOrNot...ng.dll

windows11-ltsc_2024-x64

3

ReadyOrNot...st.txt

windows10-2004-x64

1

ReadyOrNot...st.txt

windows11-ltsc_2024-x64

1

ReadyOrNot...mm.dll

windows10-2004-x64

1

ReadyOrNot...mm.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    ReadyOrNot_Fix_Repair_Steam_V5_Generic.rar
  • Size 22.8MB
  • Sample260809-bqd4vafq4y
  • SHA256 f04641a48ad71c25874e4608bffed19e5c6cf2a5db5290dbcdbe7b22927dd4fc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryransomware

Malware Config

Targets

    • Target
      Engine/Binaries/ThirdParty/Steamworks/Steamv153/Win64/steam_api64.dll
    • Size 288KB
    • SHA256 4df999c0c8cb12589f0864d52be5d4c775577aeb27fee28b49b188f9ba083eea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      ReadyOrNot/Binaries/Win64/OnlineFix.ini
    • Size 707B
    • SHA256 e998c47221a6649c1a26fd64ca38b385bbfb49a3d8e09703a7cea0f3a2eeac6c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral3behavioral4
    • Target
      ReadyOrNot/Binaries/Win64/OnlineFix.url
    • Size 46B
    • SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
    • MD5 SHA1 SHA512
    Score
    6/10
    discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral5behavioral6
    • Target
      ReadyOrNot/Binaries/Win64/OnlineFix64.dll
    • Size 12.5MB
    • SHA256 d687fcd5d3942793218036cde1b8c39d4ada63d2f4aa08778fc2722a4dc65f99
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      ReadyOrNot/Binaries/Win64/RedpointEOS/EOSSDK-Win64-Shipping.dll
    • Size 8.2MB
    • SHA256 b73f5e43ebf4579f17411ec26d3824adf4ff09636a4cef3cd0712c83f5eee70c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      ReadyOrNot/Binaries/Win64/RedpointEOS/EOSSDK-Win64-Shipping.of
    • Size 18.5MB
    • SHA256 9821beb84ed841d2e9bd412ad55b7982cf1fcb64edbf0fd3ef7ccac38632fff7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      ReadyOrNot/Binaries/Win64/dlllist.txt
    • Size 15B
    • SHA256 fc0befb4aae4b7f0eeb1c398fccea03cc795590e09db6628974520091fcfc516
    • MD5 SHA1 SHA512
    Score
    1/10
    ransomware
    behavioral13behavioral14
    • Target
      ReadyOrNot/Binaries/Win64/winmm.dll
    • Size 494KB
    • SHA256 cb8baaa2054a11628b96e474e1428a430c95321f8ac3b89764255cbd6628a9d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks