Overview

overview

8

task1

 

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AplicacionSeguridad00139201093109.zip

  • Size

    251KB

  • Sample

    191111-xek5rrb81j

  • MD5

    45bd6120bbcaefd3de1dcac1a6b104f6

  • SHA1

    c316de1329e2deb3bf4fd52e9bd5495ad62eabf1

  • SHA256

    dc98224fbd84775cd2eb3db0c4e1d1823a0e8372abb6b3c03dc67edb0b8dce15

  • SHA512

    6f7219dc421137784e2d98b7abefd28ad8287726ef45c148a011077a06e3ab801b522bf34bbf96f8f735479f6896d6da41174cd382b13b039701392e717e7819

Score
8/10
persistenceransomware

Malware Config

Targets

    • Target

      AplicacionSeguridad00139201093109.msi

    • Size

      728KB

    • MD5

      bfaead2c1e91e6487d6bb9a721b3182a

    • SHA1

      552ec684468c071ec4b5d90f5e7f66861cf1a111

    • SHA256

      4af783c54ed39809721102c865d3b6b65ba9ffdcac5c9349a6dd1e533377fba1

    • SHA512

      6eadcfa5d09878d2eef5c6429baf4daa8a037573ddb5d19a33a58502bc4e61e0530ef5a825d455489378375fa816f3516f3beb79b837f51e1fbd0c4208162a83

    Score
    8/10
    ransomwarepersistence

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Discovering connected drives

      ransomware

    • Modifies service

      persistence
    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks