Overview

overview

10

Static

static

711486a1_q...yJ.exe

windows7_x64

10

711486a1_q...yJ.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    711486a1_qDA1LxC4yJ

  • Size

    140KB

  • Sample

    210813-8jybev7zd6

  • MD5

    711486a19e8b011528dee34a5d25776e

  • SHA1

    7e131940fce4d157d0a338b8285e8e2298e8677d

  • SHA256

    880823dd9df0ca6047cd829a1031e8a167ccec0629fdeac40a097dd555debf7c

  • SHA512

    9213dc1b1ab70e6672e6bef43a50125e7752de303ddbdbfc5b395f3b228363dd57c036befb21c83945207954575b90021af0d4e1f6872253c20475f3dbc4e894

Score
10/10
evasionpersistenceransomware

Malware Config

Targets

    • Target

      711486a1_qDA1LxC4yJ

    • Size

      140KB

    • MD5

      711486a19e8b011528dee34a5d25776e

    • SHA1

      7e131940fce4d157d0a338b8285e8e2298e8677d

    • SHA256

      880823dd9df0ca6047cd829a1031e8a167ccec0629fdeac40a097dd555debf7c

    • SHA512

      9213dc1b1ab70e6672e6bef43a50125e7752de303ddbdbfc5b395f3b228363dd57c036befb21c83945207954575b90021af0d4e1f6872253c20475f3dbc4e894

    Score
    10/10
    evasionpersistenceransomware

    • Modifies WinLogon for persistence

      persistence

    • Disables Task Manager via registry modification

      evasion

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks