21034ae93ae176546e6305e4fa6502a8b6d96b73a2bc399d004243c10bdc845b | Triage

Resubmissions

27-05-2020 14:40

200527-txwwm11vej 10

26-05-2020 15:35

200526-8h87qpsrz2 6

25-05-2020 13:03

200525-7xn38c1n6x 6

Sharing

General

Target

IMMUNI.bin.zip
Size

454KB
Sample

200525-7xn38c1n6x
MD5

9ba08fca95421227586d182bdf33aad5
SHA1

ca43488ff27974199cf10425d25e144bbc8c570d
SHA256

21034ae93ae176546e6305e4fa6502a8b6d96b73a2bc399d004243c10bdc845b
SHA512

170c052a0330dc929059bcfb43b5c0c38371d34f35ec2a21f08dcf7277ecbd43fb41eaa231abe99f64e64d07ec2b5e6c0bbdab9761cd057a3b442c72fc952613

Score

6^/10

evasion ransomware spyware trojan

Malware Config

Targets

- Target
  
  IMMUNI.bin
- Size
  
  955KB
- MD5
  
  b226803ac5a68cd86ecb7c0c6c4e9d00
- SHA1
  
  110301b5f4eced3c0d6712f023d3e0212515bf99
- SHA256
  
  7980ef30b9bed26a9823d3dd5746cdefe5d01de2b2eb2c5e17dbfd1fd52f62bf
- SHA512
  
  7a333fb668c8a7fa67715703d16cf8ed296c553fa3aab7c861337a211c605d0b20f0c760a4bfb3b72561efe342472382ecf890fd5de3e51c0022038474516e79
Score

6^/10

evasion spyware trojan ransomware
- Modifies system certificate store
  evasion spyware trojan
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

Tasks

static1

behavioral1

ransomwaremmlockerevasionspywaretrojan

behavioral2