Overview

overview

8

Static

static

Trojan-Ran...er.exe

windows7-x64

8

Trojan-Ran...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.Blocker.jdac-7e2f1d93829b1368d18c7f6124aadca29787617fc14a80bfcba8b6bc5db03a32

  • Size

    512KB

  • Sample

    221107-hbe6xscdf2

  • MD5

    6de847035e6f6a62500b1286f9943d40

  • SHA1

    1009a11ca81d9c1bdb55bc0ea5d2a780bfd03b60

  • SHA256

    7e2f1d93829b1368d18c7f6124aadca29787617fc14a80bfcba8b6bc5db03a32

  • SHA512

    362350d5784691966c433dd4cf9474d680139776c0eaff26887b31c4892447caa01b4cd5f49ddad8018b7e4547d10faadf192323059d4d186d4cc9ccbd6804f5

  • SSDEEP

    6144:nJgGMI8kr+rvblQlVkMNPWkzlyjFi7ehxoem71oy1ps:JXj8w+5QnzxzIFi7ehqem71o3

Score
8/10
persistence

Malware Config

Targets

    • Target

      Trojan-Ransom.Win32.Blocker.jdac-7e2f1d93829b1368d18c7f6124aadca29787617fc14a80bfcba8b6bc5db03a32

    • Size

      512KB

    • MD5

      6de847035e6f6a62500b1286f9943d40

    • SHA1

      1009a11ca81d9c1bdb55bc0ea5d2a780bfd03b60

    • SHA256

      7e2f1d93829b1368d18c7f6124aadca29787617fc14a80bfcba8b6bc5db03a32

    • SHA512

      362350d5784691966c433dd4cf9474d680139776c0eaff26887b31c4892447caa01b4cd5f49ddad8018b7e4547d10faadf192323059d4d186d4cc9ccbd6804f5

    • SSDEEP

      6144:nJgGMI8kr+rvblQlVkMNPWkzlyjFi7ehxoem71oy1ps:JXj8w+5QnzxzIFi7ehqem71o3

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks