Overview

overview

10

Static

static

10

398575a09f...72.exe

windows7-x64

10

398575a09f...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    398575a09f41e8b1da28164960e72cdacb331e24922c999e1b9d1887a6ec5a72

  • Size

    1.4MB

  • Sample

    221125-z1pv4aab9v

  • MD5

    12a328ce6651249030f5370f255ca63e

  • SHA1

    a8048a259c2aeb4bee82eea524e402add040aa35

  • SHA256

    398575a09f41e8b1da28164960e72cdacb331e24922c999e1b9d1887a6ec5a72

  • SHA512

    ae03500bd52eff224135ffa4ac5030b6d24538b07e8a01db0cd2ffa5a3ba5202c4eb61fd53722886610299d0994895d6fce7538bf6735f4b348d9c47ef0668b0

  • SSDEEP

    24576:z9WQitvyUilzOUxaOWk01G4fbu/F41jen6KXYzkEEknJS7DFN4L3GmPA705sCvsF:z9WDAUozOUxaOyGau6I6WPDvlAAoefk1

Score
10/10
xoristevasionpersistenceransomware

Malware Config

Targets

    • Target

      398575a09f41e8b1da28164960e72cdacb331e24922c999e1b9d1887a6ec5a72

    • Size

      1.4MB

    • MD5

      12a328ce6651249030f5370f255ca63e

    • SHA1

      a8048a259c2aeb4bee82eea524e402add040aa35

    • SHA256

      398575a09f41e8b1da28164960e72cdacb331e24922c999e1b9d1887a6ec5a72

    • SHA512

      ae03500bd52eff224135ffa4ac5030b6d24538b07e8a01db0cd2ffa5a3ba5202c4eb61fd53722886610299d0994895d6fce7538bf6735f4b348d9c47ef0668b0

    • SSDEEP

      24576:z9WQitvyUilzOUxaOWk01G4fbu/F41jen6KXYzkEEknJS7DFN4L3GmPA705sCvsF:z9WDAUozOUxaOyGau6I6WPDvlAAoefk1

    Score
    10/10
    xoristpersistenceransomwareevasion

    • Detected Xorist Ransomware

    • Modifies firewall policy service

      evasion

    • Xorist Ransomware

      Xorist is a ransomware first seen in 2020.

      ransomwarexorist

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks