Overview

overview

7

Static

static

e105c23e82...cd.exe

windows7-x64

3

e105c23e82...cd.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd

  • Size

    194KB

  • Sample

    221003-cpq8fsdebq

  • MD5

    00afdd8933d2197f45560071082c88ed

  • SHA1

    3c10cb3f935eff1d823ea82ef2d9f3bdca8d293f

  • SHA256

    e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd

  • SHA512

    0ed3a23fed09c2a77c5b54ca5179f4cac38bd594793833fb2131d5038a41ed28832db1922283bba532fd10524b64947c1935b5632f186a6c22f88229078796b1

  • SSDEEP

    3072:AzX4Fmy4utEZeIS4OrhWbrZ1zVIQoeZVya59w8dFarlwCXgI+RDa367OmJkGPLZf:f4xS4tbrKQoA3ow+2aaOFzb

Score
7/10
discoverypersistenceransomware

Malware Config

Targets

    • Target

      e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd

    • Size

      194KB

    • MD5

      00afdd8933d2197f45560071082c88ed

    • SHA1

      3c10cb3f935eff1d823ea82ef2d9f3bdca8d293f

    • SHA256

      e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd

    • SHA512

      0ed3a23fed09c2a77c5b54ca5179f4cac38bd594793833fb2131d5038a41ed28832db1922283bba532fd10524b64947c1935b5632f186a6c22f88229078796b1

    • SSDEEP

      3072:AzX4Fmy4utEZeIS4OrhWbrZ1zVIQoeZVya59w8dFarlwCXgI+RDa367OmJkGPLZf:f4xS4tbrKQoA3ow+2aaOFzb

    Score
    7/10
    discoverypersistenceransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks