b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17

Analysis

max time kernel
73s
max time network
121s
platform
windows10_x64
resource
win10v20210408
submitted
26-07-2021 12:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe
Size

17KB
MD5

3beb3d466bcc0977ec2dd66d72ab6bb3
SHA1

e94089137a41fd95c790f88cc9b57c2b4d5625ba
SHA256

b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17
SHA512

2d6fc985f4292f1945dc8caaf73286815d3ef834be0f6b07a19b0f9c0faa9b8c2022ef2fddc8925dbfee9a4bdcce553cb996c44abe8b7baf3a16c8c6d2c28ef7

Score

5^/10

ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1594587808-2047097707-2163810515-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\\\god.jpg"	b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe

C:\Users\Admin\AppData\Local\Temp\b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe
"C:\Users\Admin\AppData\Local\Temp\b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe"
1⤵
- Sets desktop wallpaper using registry
PID:912

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads