Overview

overview

10

Static

static

software-l...r8.exe

windows7_x64

10

software-l...r8.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    software-launcher8

  • Size

    338KB

  • Sample

    200903-lr21ndnvna

  • MD5

    26cae6fdb074d2e30002351c40aa2b58

  • SHA1

    315dfcb400f3fb36220a91fd9f8b9200366eca56

  • SHA256

    53fd929034ec71904be8ef06d4c42f2467997f16364431cb3e46a24d82bdaf6f

  • SHA512

    d00c0e9a3a5fb93f45b7ddf176fda720ccc6e23dbb0615c63222bdacce2c7f15cb8821488141bf5d4452c4a015f0b6704ce2beda4910a4e8509576fc04425b94

Score
10/10
hiddentearransomware

Malware Config

Targets

    • Target

      software-launcher8

    • Size

      338KB

    • MD5

      26cae6fdb074d2e30002351c40aa2b58

    • SHA1

      315dfcb400f3fb36220a91fd9f8b9200366eca56

    • SHA256

      53fd929034ec71904be8ef06d4c42f2467997f16364431cb3e46a24d82bdaf6f

    • SHA512

      d00c0e9a3a5fb93f45b7ddf176fda720ccc6e23dbb0615c63222bdacce2c7f15cb8821488141bf5d4452c4a015f0b6704ce2beda4910a4e8509576fc04425b94

    Score
    10/10
    ransomwarehiddentear

    • HiddenTear Ransomware

      Open-Source ransomware available on Github since 2015, with many versions in the wild.

      ransomwarehiddentear

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks