d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5

Analysis

max time kernel
117s
max time network
120s
platform
windows10_x64
resource
win10-en-20210920
submitted
23/09/2021, 13:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe
Size 18KB
Sample210923-qb2c6aechr
SHA256 8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b
MD5 ddc50d4ae0674d854a845b3eb32508c3
SHA1 c61f2cdb0faf31120e33e023b7b923b01bc97fbf
SHA512 06726d49f931902c7f22d7db1e61ac7dfd28a8b0323217a7e1e7c480a3f03a2b6b3abe76cbf7962a659ad928e604d1bd66bae3c9418f96088e7f265acdee322d
MD5 SHA1 SHA512

Score

5^/10

ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2481030822-2828258191-1606198294-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\\\god.jpg"	8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe

C:\Users\Admin\AppData\Local\Temp\8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe
"C:\Users\Admin\AppData\Local\Temp\8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe"
1⤵
- Sets desktop wallpaper using registry
PID:1588

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads