General
- Target Tray.exe
- Size 321KB
- Sample210619-d3391n953n
- SHA256 e07b0cd7eca5bc70b07ea786c3ef4da28036c901effa2193a93caf945cb2b334
- MD5 6585cb51ff21007fb9ef936e96c58982
- SHA1 7a3d5563460b9935fe84879ee14fabfc7c664825
- SHA512 523c7b3ed0907a473eac04c8cb8642eeea1d3a223069f876a7e0bc18075d59f9903319f6b2e3c2fa262158f04c4ad3637568dd9b0558732c8a574ffe566efc7d
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Tray.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Tray.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Targets
-
- Target Tray.exe
- Size 321KB
- SHA256 e07b0cd7eca5bc70b07ea786c3ef4da28036c901effa2193a93caf945cb2b334
- MD5 6585cb51ff21007fb9ef936e96c58982
- SHA1 7a3d5563460b9935fe84879ee14fabfc7c664825
- SHA512 523c7b3ed0907a473eac04c8cb8642eeea1d3a223069f876a7e0bc18075d59f9903319f6b2e3c2fa262158f04c4ad3637568dd9b0558732c8a574ffe566efc7d
- MD5 SHA1 SHA512
Score10/10Drops file in Drivers directory
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
Drops startup file
Drops desktop.ini file(s)
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
Drops file in System32 directory