Overview

overview

9

Static

static

a07ad47b05...f4.exe

windows7_x64

9

a07ad47b05...f4.exe

windows10_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a07ad47b052c812a2c2da5b1787855f4.exe

  • Size

    28KB

  • Sample

    220101-s5cm1agccn

  • MD5

    a07ad47b052c812a2c2da5b1787855f4

  • SHA1

    bafda67a9dd19795584ed8679d3a0e5b36d2432a

  • SHA256

    a0fb8417720da120c09f19ad62030bf1dc7f51b74326582f2f9d4488d426a800

  • SHA512

    f0f3cfd9ecc6e5945fed89b953018460617986c4e0a3548dae07736014cd2d8f63ca1d20ea0b62606dd41c7b5bf3ea33e18f9ba66fe1531dde24f4652df03406

Score
9/10
ransomware

Malware Config

Targets

    • Target

      a07ad47b052c812a2c2da5b1787855f4.exe

    • Size

      28KB

    • MD5

      a07ad47b052c812a2c2da5b1787855f4

    • SHA1

      bafda67a9dd19795584ed8679d3a0e5b36d2432a

    • SHA256

      a0fb8417720da120c09f19ad62030bf1dc7f51b74326582f2f9d4488d426a800

    • SHA512

      f0f3cfd9ecc6e5945fed89b953018460617986c4e0a3548dae07736014cd2d8f63ca1d20ea0b62606dd41c7b5bf3ea33e18f9ba66fe1531dde24f4652df03406

    Score
    9/10
    ransomware

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Deletion

2
T1107

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Inhibit System Recovery

2
T1490

Tasks