General

  • Target
    V-Bucks Generator.exe
  • Size 458KB
  • Sample260812-gfbtmabj3x
  • SHA256 9bf2689546105532a778dc6a0a6e964ece8ff33c4fcea28e82c29940e06d2666
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      V-Bucks Generator.exe
    • Size 458KB
    • SHA256 9bf2689546105532a778dc6a0a6e964ece8ff33c4fcea28e82c29940e06d2666
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Possible privilege escalation attempt

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

MITRE ATT&CK Enterprise v16

Tasks