General
- Target Trojan-Ransom.Win32.Blocker.ileg-676f4d7755cab073507ae182be7417cfd2f962a8cc3a4a063913822ee21eaef0
- Size 247KB
- Sample221107-bgdfysagd2
- SHA256 676f4d7755cab073507ae182be7417cfd2f962a8cc3a4a063913822ee21eaef0
- MD5 69bf991739ce71cc6fd5a0d9aca3aa4a
- SHA1 e43a58f39ab0b25817a2c5c87f440a37276cc454
- SHA512 52031da74759a1c9ecf30b6e77b41c7a224f3f5e11f3fa20e8298e753c1ca65e8ef8401a5d22436730229b0a9ee40e09d9e38b76124ac07f25dfad60d7a2deb4
- SSDEEP 768:AjNYM/5Imwt80PKBds2amur5ccbpQSx7f1zBmQzTGfmgyqr0:wYUgKBiQk53Bx7f1zwQVgvr
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Trojan-Ransom.Win32.Blocker.ileg-676f4d7755cab073507ae182be7417cfd2f962a8cc3a4a063913822ee21eaef0
- Size 247KB
- SHA256 676f4d7755cab073507ae182be7417cfd2f962a8cc3a4a063913822ee21eaef0
- MD5 69bf991739ce71cc6fd5a0d9aca3aa4a
- SHA1 e43a58f39ab0b25817a2c5c87f440a37276cc454
- SHA512 52031da74759a1c9ecf30b6e77b41c7a224f3f5e11f3fa20e8298e753c1ca65e8ef8401a5d22436730229b0a9ee40e09d9e38b76124ac07f25dfad60d7a2deb4
- SSDEEP 768:AjNYM/5Imwt80PKBds2amur5ccbpQSx7f1zBmQzTGfmgyqr0:wYUgKBiQk53Bx7f1zwQVgvr
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory