a9c4d78cd5e550155bf8cc080f30d632a15155a6dd55b1d5991b7d40809ce336 | Triage™

Login
Reports

Overview

overview

6

Static

static

ransomware

windows7_x64

6

Resubmissions

14/11/2022, 23:13

221114-27l4wsea9510

29/05/2020, 11:41

200529-zk6e3261b26

Sharing

Copy URL Twitter E-mail

General

Target
UnluckyWare.exe
Size 228KB
Sample200529-zk6e3261b2
SHA256 a9c4d78cd5e550155bf8cc080f30d632a15155a6dd55b1d5991b7d40809ce336
MD5 d7924023e6cb8826e6db9c1bb917ee4e
SHA1 d3727664988db585b9d632d2888963019b5e6e11
SHA512 249102437da4a1a361b082b1683f4a69f7ee48ec7e423d2e0551440b61cbbd9f86ce2bd9b93507f7ffa4d268fb0f8d898870162eeb5eea458db67b50b3091519
MD5 SHA1 SHA512

Score

6^/10

evasion persistence ransomware spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

UnluckyWare.exe

Resource

win7v200430

windows7_x64

0 signatures

0 seconds

evasion spyware trojan ransomware persistence

Malware Config

Targets

- Target
  UnluckyWare.exe
- Size 228KB
- SHA256 a9c4d78cd5e550155bf8cc080f30d632a15155a6dd55b1d5991b7d40809ce336
- MD5 d7924023e6cb8826e6db9c1bb917ee4e
- SHA1 d3727664988db585b9d632d2888963019b5e6e11
- SHA512 249102437da4a1a361b082b1683f4a69f7ee48ec7e423d2e0551440b61cbbd9f86ce2bd9b93507f7ffa4d268fb0f8d898870162eeb5eea458db67b50b3091519
- MD5 SHA1 SHA512
Score

6^/10

evasion spyware trojan ransomware persistence
- Adds Run entry to start application
  persistence
- Drops desktop.ini file(s)
- Modifies system certificate store
  evasion spyware trojan
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

evasionspywaretrojanransomwarepersistence

© 2018-2026

Terms | Privacy