Description
Ransomware often targets backup files to inhibit system recovery.
IRSdeclarationcod.exe
General
Target
Size
Sample
IRSdeclarationcod.exe
282KB
200313-8w7dt2yb5n
Score
9 /10
MD5
SHA1
SHA256
SHA512
fe3fd53ddc7c229b1150d970a05947c0
3abeddbbbd29310290955cc7c1a895550c92ab96
c414bbb789af8e3fb93b33344b31f1991582ec0f06558b29a3178d2b02465c72
8b94e67f48f90d7a0e463a7623ba6f87a5f4108f33587c8f579f29aa3c9b0a22f7e134470824d25dccb552bfc868b18cd3f05ef09aaceef2bab6984c21f203b4
Malware Config
Targets
Target
MD5
Filesize
IRSdeclarationcod.exe
fe3fd53ddc7c229b1150d970a05947c0
282KB
Score
9/10
SHA1
SHA256
SHA512
3abeddbbbd29310290955cc7c1a895550c92ab96
c414bbb789af8e3fb93b33344b31f1991582ec0f06558b29a3178d2b02465c72
8b94e67f48f90d7a0e463a7623ba6f87a5f4108f33587c8f579f29aa3c9b0a22f7e134470824d25dccb552bfc868b18cd3f05ef09aaceef2bab6984c21f203b4
Tags
Signatures
-
Deletes shadow copies
-
Deletes itself
-
Modifies service
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks