royal | 9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926 | Triage

Sharing

General

Target

9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926
Size

2.9MB
Sample

221228-vp51qaea6z
MD5

afd5d656a42a746e95926ef07933f054
SHA1

04028a0a1d44f81709040c31af026785209d4343
SHA256

9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926
SHA512

9397ebac71847597852cc8ca9045dc4c66802d4afb612d7ebd30a5f4dd5b50c6714d2c76e5c4e4e408d12deef4f33b51b4a393e89ec23d984a159682f6e90999
SSDEEP

49152:cDVwASOLGtlqrRIU6i9+vazNqQlJZP1BMU2thA8mNtNCiJlrRUFcJ7HIPcLzk+5c:wm+GaNqqJJ12vlZol8cJ7rcl

Score

10^/10

royal ransomware

Malware Config

Targets

- Target
  
  9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926
- Size
  
  2.9MB
- MD5
  
  afd5d656a42a746e95926ef07933f054
- SHA1
  
  04028a0a1d44f81709040c31af026785209d4343
- SHA256
  
  9db958bc5b4a21340ceeeb8c36873aa6bd02a460e688de56ccbba945384b1926
- SHA512
  
  9397ebac71847597852cc8ca9045dc4c66802d4afb612d7ebd30a5f4dd5b50c6714d2c76e5c4e4e408d12deef4f33b51b4a393e89ec23d984a159682f6e90999
- SSDEEP
  
  49152:cDVwASOLGtlqrRIU6i9+vazNqQlJZP1BMU2thA8mNtNCiJlrRUFcJ7HIPcLzk+5c:wm+GaNqqJJ12vlZol8cJ7rcl
Score

9^/10

ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Deletion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

ransomwareroyal

behavioral1

behavioral2