Overview

overview

10

Static

static

Deniz_K_z_.bin.exe

windows7_x64

10

Deniz_K_z_.bin.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Deniz_K_z_.bin.zip
  • Size 1.5MB
  • Sample200722-ej86e5sbnj
  • SHA256 4d0dabf226858d79c903e62f4422e95263f9c184f2c286e96a1d09560f44b6ec
  • MD5 SHA1 SHA512
Score
10/10
evasionpersistenceransomwaretrojan

Malware Config

Targets

    • Target
      Deniz_K_z_.bin
    • Size 3.4MB
    • SHA256 c8d49d874454bf1fa50cb7e4c00677e028af38e1d22e41476634d5d5a349cd7e
    • MD5 SHA1 SHA512
    Score
    10/10
    evasiontrojanpersistenceransomware

    • UAC bypass

      evasiontrojan

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Modifies Windows Firewall

      evasion

    • Checks whether UAC is enabled

      evasiontrojan

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks