troldesh | 4486ecf3f3498975deb6bc982ee6c543d1453cd55fd35662eef7dc7878c3e407

Resubmissions

07-04-2024 02:21

240407-cs71daba79 10

07-04-2024 02:21

07-04-2024 02:20

07-04-2024 02:20

07-07-2022 18:59

Sharing

Copy URL

Twitter E-mail

General

Target

4486ecf3f3498975deb6bc982ee6c543d1453cd55fd35662eef7dc7878c3e407
Size

1.0MB
Sample

220707-xm664shhb2
MD5

dd77766a7812b98ad629c9d95e32a616
SHA1

9c821700d9af634ac0c3cf2076ac3e681774c47f
SHA256

4486ecf3f3498975deb6bc982ee6c543d1453cd55fd35662eef7dc7878c3e407
SHA512

d49067da309deec250ab5753fec487ed77b6e3659cb7d4f41b4a81b3eacfc370ddd024bb14bea11a660234f468ea1535f5971f7e51b1736c60f0a783ff5b2c1d

Score

10^/10

Malware Config

Targets

- Target
  
  4486ecf3f3498975deb6bc982ee6c543d1453cd55fd35662eef7dc7878c3e407
- Size
  
  1.0MB
- MD5
  
  dd77766a7812b98ad629c9d95e32a616
- SHA1
  
  9c821700d9af634ac0c3cf2076ac3e681774c47f
- SHA256
  
  4486ecf3f3498975deb6bc982ee6c543d1453cd55fd35662eef7dc7878c3e407
- SHA512
  
  d49067da309deec250ab5753fec487ed77b6e3659cb7d4f41b4a81b3eacfc370ddd024bb14bea11a660234f468ea1535f5971f7e51b1736c60f0a783ff5b2c1d
Score

10^/10

troldesh discovery persistence ransomware trojan upx
- Troldesh, Shade, Encoder.858
  Troldesh is a ransomware spread by malspam.
  ransomware trojan troldesh
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Troldesh, Shade, Encoder.858

UPX packed file

Adds Run key to start application

Checks installed software on the system

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2