f0fbd0654d4bf299c08f1f83e7b6c3a1f332b49c24b3cf0b9b87757b8c13f093

Resubmissions

19/11/2020, 14:39

201119-59epbrqadx10

19/11/2020, 14:22

201119-ff99dc42e610

19/11/2020, 14:16

201119-298y5e8ncj9

Sharing

Copy URL Twitter E-mail

General

Target
f0fbd0654d4bf299c08f1f83e7b6c3a1f332b49c24b3cf0b9b87757b8c13f093.bin.sample
Size 1.8MB
Sample201119-298y5e8ncj
SHA256 f0fbd0654d4bf299c08f1f83e7b6c3a1f332b49c24b3cf0b9b87757b8c13f093
MD5 10d7151b9ee53b8da8ee6f85001ffb20
SHA1 76d33ef58ea7b012342d975d871db64840da9675
SHA512 1c6d2d7f509b462b5d48db61817ee42a7204d10141c59394eb190d0dba733b831a6344bb85197dfac358939379e640c9f38732d376e28f92e187806ca574d10f
MD5 SHA1 SHA512

Score

9^/10

persistence ransomware

Malware Config

Targets

- Target
  f0fbd0654d4bf299c08f1f83e7b6c3a1f332b49c24b3cf0b9b87757b8c13f093.bin.sample
- Size 1.8MB
- SHA256 f0fbd0654d4bf299c08f1f83e7b6c3a1f332b49c24b3cf0b9b87757b8c13f093
- MD5 10d7151b9ee53b8da8ee6f85001ffb20
- SHA1 76d33ef58ea7b012342d975d871db64840da9675
- SHA512 1c6d2d7f509b462b5d48db61817ee42a7204d10141c59394eb190d0dba733b831a6344bb85197dfac358939379e640c9f38732d376e28f92e187806ca574d10f
- MD5 SHA1 SHA512
Score

9^/10

persistence ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Grants admin privileges
  Uses net.exe to modify the user's privileges.
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Drops startup file
- Modifies service
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Account Manipulation

T1098

Modify Existing Service

T1031

Privilege Escalation

Defense Evasion

File Deletion

T1107

Modify Registry

T1112

Credential Access

Account Manipulation

T1098

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Deletes shadow copies

Grants admin privileges

Modifies extensions of user files

Drops startup file

Modifies service

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2