Overview

overview

8

Static

static

manual64.dll

windows10_x64

8

Resubmissions

03-11-2022 09:46

221103-lrnd1sghc5 3

22-09-2022 15:06

220922-sgtavafedj 3

14-10-2021 16:48

211014-vbeavaaad5 8

22-09-2021 05:58

210922-gpdpksecgk 8

22-09-2021 05:36

210922-gax5nsecdn 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    manual64.dll

  • Size

    184KB

  • Sample

    210922-gax5nsecdn

  • MD5

    d35a5caf8af43432ec2f5a2318b20597

  • SHA1

    8fd8f62a848a1d9c1ff18c7bc16e8a6d2c67c37e

  • SHA256

    c74873d7b8cc622379ed49bd0b0e477167ae176aa329b01338666ec4c1a4426b

  • SHA512

    7de9c021c2e64c564ba8ac5c0f1914718c240a382bc717dd7e93122a0a51c849c263ae0438eae5c324ca1e5c3d346c2a09ab7fc63bbaa598e3973943a5d84263

Score
8/10
ransomware

Malware Config

Targets

    • Target

      manual64.dll

    • Size

      184KB

    • MD5

      d35a5caf8af43432ec2f5a2318b20597

    • SHA1

      8fd8f62a848a1d9c1ff18c7bc16e8a6d2c67c37e

    • SHA256

      c74873d7b8cc622379ed49bd0b0e477167ae176aa329b01338666ec4c1a4426b

    • SHA512

      7de9c021c2e64c564ba8ac5c0f1914718c240a382bc717dd7e93122a0a51c849c263ae0438eae5c324ca1e5c3d346c2a09ab7fc63bbaa598e3973943a5d84263

    Score
    8/10
    ransomware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks