Resubmissions

27/04/2022, 15:21

220427-srr6jaaha69

26/04/2022, 17:40

220426-v83dyahdcp9

General

  • Target
    5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa
  • Size 563KB
  • Sample220427-srr6jaaha6
  • SHA256 5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa
  • MD5 SHA1 SHA512
Score
9/10

Malware Config

Targets

    • Target
      5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa
    • Size 563KB
    • SHA256 5d2204f3a20e163120f52a2e3595db19890050b2faa96c6cba6b094b0a52b0aa
    • MD5 SHA1 SHA512
    Score
    9/10
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Modifies boot configuration data using bcdedit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks