General

  • Target

    01ab4680e2e3d977b2df76c3ce0d83f2e4e184c6fede4f6c4fc6d8bd100867db

  • Size

    1.3MB

  • Sample

    220523-w7xbzabde7

  • MD5

    0553e6e57de5a932ba07d7226e80a747

  • SHA1

    ae0e419df31a1470a8bfab8a5737237afa165c82

  • SHA256

    01ab4680e2e3d977b2df76c3ce0d83f2e4e184c6fede4f6c4fc6d8bd100867db

  • SHA512

    f48bb87ad3bd031a29bfe117f2ba68d8d4390a7edf346ea1cf8104992623725e0558a0713abe7b62e5fd7138b1f8645e25887bf567132990ea72f55ad2ab842b

Score
9/10

Malware Config

Targets

    • Target

      01ab4680e2e3d977b2df76c3ce0d83f2e4e184c6fede4f6c4fc6d8bd100867db

    • Size

      1.3MB

    • MD5

      0553e6e57de5a932ba07d7226e80a747

    • SHA1

      ae0e419df31a1470a8bfab8a5737237afa165c82

    • SHA256

      01ab4680e2e3d977b2df76c3ce0d83f2e4e184c6fede4f6c4fc6d8bd100867db

    • SHA512

      f48bb87ad3bd031a29bfe117f2ba68d8d4390a7edf346ea1cf8104992623725e0558a0713abe7b62e5fd7138b1f8645e25887bf567132990ea72f55ad2ab842b

    Score
    9/10
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

File Deletion

2
T1107

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Impact

Inhibit System Recovery

2
T1490

Defacement

1
T1491

Tasks