d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5

Analysis

max time kernel
117s
max time network
120s
platform
windows10_x64
resource
win10-en-20210920
submitted
23-09-2021 13:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe
Size

18KB
MD5

ddc50d4ae0674d854a845b3eb32508c3
SHA1

c61f2cdb0faf31120e33e023b7b923b01bc97fbf
SHA256

8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b
SHA512

06726d49f931902c7f22d7db1e61ac7dfd28a8b0323217a7e1e7c480a3f03a2b6b3abe76cbf7962a659ad928e604d1bd66bae3c9418f96088e7f265acdee322d

Score

5^/10

ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2481030822-2828258191-1606198294-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\\\god.jpg"	8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe

C:\Users\Admin\AppData\Local\Temp\8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe
"C:\Users\Admin\AppData\Local\Temp\8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe"
1⤵
- Sets desktop wallpaper using registry
PID:1588

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads