92ab5cdf666127883d3edcec41b40137585eb86d554fa9c10d823c4bd18f9f9c | Triage

Sharing

General

Target

92ab5cdf666127883d3edcec41b40137585eb86d554fa9c10d823c4bd18f9f9c
Size

443KB
Sample

221126-fdextscf57
MD5

206b5136095cb2bcfb902c8ffb218163
SHA1

c7c74e59e23e3c5cb38f77de2a60c36f12554f81
SHA256

92ab5cdf666127883d3edcec41b40137585eb86d554fa9c10d823c4bd18f9f9c
SHA512

815e121fa100825b147893ab70f38bcab29057e90b6081bb7f6675fb28645c7785af2421d4e1cd0c0dadc5649a46c06d6795de0d0232720f870d77ddf1455151
SSDEEP

6144:kzxxeLzWoedqagVOh+RY+m2pBvbHQt2ulwWs45N/bvWNqgRe08r:ExeHWowCO23v7S2uj/SNdfa

Score

9^/10

collection evasion persistence ransomware trojan

Malware Config

Targets

- Target
  
  92ab5cdf666127883d3edcec41b40137585eb86d554fa9c10d823c4bd18f9f9c
- Size
  
  443KB
- MD5
  
  206b5136095cb2bcfb902c8ffb218163
- SHA1
  
  c7c74e59e23e3c5cb38f77de2a60c36f12554f81
- SHA256
  
  92ab5cdf666127883d3edcec41b40137585eb86d554fa9c10d823c4bd18f9f9c
- SHA512
  
  815e121fa100825b147893ab70f38bcab29057e90b6081bb7f6675fb28645c7785af2421d4e1cd0c0dadc5649a46c06d6795de0d0232720f870d77ddf1455151
- SSDEEP
  
  6144:kzxxeLzWoedqagVOh+RY+m2pBvbHQt2ulwWs45N/bvWNqgRe08r:ExeHWowCO23v7S2uj/SNdfa
Score

9^/10

collection evasion persistence ransomware trojan
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Accesses Microsoft Outlook accounts
  collection
- Accesses Microsoft Outlook profiles
  collection
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

File Deletion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Email Collection

Exfiltration

Command and Control

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

collectionevasionpersistenceransomwaretrojan

behavioral2