maze | 33afa2f1d53d5279b6fc87ce6834193fdd7e16e4b44e895aae4b9da00be0c502 | Triage

Sharing

General

Target

33afa2f1d53d5279b6fc87ce6834193fdd7e16e4b44e895aae4b9da00be0c502
Size

352KB
Sample

200108-qwszj1akws
MD5

5774f35d180c0702741a46d98190ff37
SHA1

a20b5761f1ddc5a758373d5eb294c0e697355f90
SHA256

33afa2f1d53d5279b6fc87ce6834193fdd7e16e4b44e895aae4b9da00be0c502
SHA512

2ad990fe44332c8c9bd7149d2bb229aaad7e185aaded623d03b29fee053c10a4a9d699e6c4b9022cfbb212d6a7c4fbe49092069ded6e3da2329bbd5273203680

Score

10^/10

maze ransomware trojan

Malware Config

Targets

- Target
  
  33afa2f1d53d5279b6fc87ce6834193fdd7e16e4b44e895aae4b9da00be0c502
- Size
  
  352KB
- MD5
  
  5774f35d180c0702741a46d98190ff37
- SHA1
  
  a20b5761f1ddc5a758373d5eb294c0e697355f90
- SHA256
  
  33afa2f1d53d5279b6fc87ce6834193fdd7e16e4b44e895aae4b9da00be0c502
- SHA512
  
  2ad990fe44332c8c9bd7149d2bb229aaad7e185aaded623d03b29fee053c10a4a9d699e6c4b9022cfbb212d6a7c4fbe49092069ded6e3da2329bbd5273203680
Score

10^/10

ransomware trojan maze
- Maze
  Maze is a file encrypting virus and also a successor to ChaCha.
  trojan ransomware maze
- Deletes shadow copies
  ransomware
- Drops startup file
- Sets desktop wallpaper using registry
  ransomware
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Deletion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Inhibit System Recovery

Tasks

task1

ransomwaretrojanmaze

task2

ransomwaretrojanmaze