a9c4d78cd5e550155bf8cc080f30d632a15155a6dd55b1d5991b7d40809ce336 | Triage

Resubmissions

14-11-2022 23:13

221114-27l4wsea95 10

29-05-2020 11:41

200529-zk6e3261b2 6

Sharing

General

Target

UnluckyWare.exe
Size

228KB
Sample

200529-zk6e3261b2
MD5

d7924023e6cb8826e6db9c1bb917ee4e
SHA1

d3727664988db585b9d632d2888963019b5e6e11
SHA256

a9c4d78cd5e550155bf8cc080f30d632a15155a6dd55b1d5991b7d40809ce336
SHA512

249102437da4a1a361b082b1683f4a69f7ee48ec7e423d2e0551440b61cbbd9f86ce2bd9b93507f7ffa4d268fb0f8d898870162eeb5eea458db67b50b3091519

Score

6^/10

evasion persistence ransomware spyware trojan

Malware Config

Targets

- Target
  
  UnluckyWare.exe
- Size
  
  228KB
- MD5
  
  d7924023e6cb8826e6db9c1bb917ee4e
- SHA1
  
  d3727664988db585b9d632d2888963019b5e6e11
- SHA256
  
  a9c4d78cd5e550155bf8cc080f30d632a15155a6dd55b1d5991b7d40809ce336
- SHA512
  
  249102437da4a1a361b082b1683f4a69f7ee48ec7e423d2e0551440b61cbbd9f86ce2bd9b93507f7ffa4d268fb0f8d898870162eeb5eea458db67b50b3091519
Score

6^/10

evasion spyware trojan ransomware persistence
- Adds Run entry to start application
  persistence
- Drops desktop.ini file(s)
- Modifies system certificate store
  evasion spyware trojan
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

Tasks

static1

behavioral1

evasionspywaretrojanransomwarepersistence