Resubmissions

25-07-2021 14:36

210725-axvbkfmava 10

25-07-2021 13:09

210725-p9et3vdq62 8

General

  • Target

    WindowsFormsApp1.exe

  • Size

    228KB

  • Sample

    210725-p9et3vdq62

  • MD5

    8c1344abfab3ca04edc09823d638791c

  • SHA1

    b45968fef318759b3f82ae7759d0e284099e5617

  • SHA256

    a3bc02793e389eca1d2d3eab3ad4925b50ad90d64d66e418789b62144a5f8f74

  • SHA512

    9ded3851cb4ee2649639f19b2c2e882c4fecab4fa98114241dacc082d52d268c793ff082463395b8e57af8ccc69da46e016757b676d025c50e74b71da960622c

Score
8/10

Malware Config

Targets

    • Target

      WindowsFormsApp1.exe

    • Size

      228KB

    • MD5

      8c1344abfab3ca04edc09823d638791c

    • SHA1

      b45968fef318759b3f82ae7759d0e284099e5617

    • SHA256

      a3bc02793e389eca1d2d3eab3ad4925b50ad90d64d66e418789b62144a5f8f74

    • SHA512

      9ded3851cb4ee2649639f19b2c2e882c4fecab4fa98114241dacc082d52d268c793ff082463395b8e57af8ccc69da46e016757b676d025c50e74b71da960622c

    Score
    8/10
    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks