hxxps://github[.]com/Endermanch/MalwareDatabase/blob/master/NoEscape[.]zip?raw=true

Resubmissions

13-01-2023 04:24

230113-e1hrkaec23 10

Sharing

Copy URL

Twitter E-mail

General

Target

https://github.com/Endermanch/MalwareDatabase/blob/master/NoEscape.zip?raw=true
Sample

230113-e1hrkaec23

Score

10^/10

Malware Config

Targets

- Target
  
  https://github.com/Endermanch/MalwareDatabase/blob/master/NoEscape.zip?raw=true
Score

10^/10

evasion persistence ransomware trojan
- Modifies WinLogon for persistence
  persistence
- UAC bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Drops desktop.ini file(s)
- Legitimate hosting services abused for malware hosting/C2
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

T1004

Privilege Escalation

Bypass User Account Control

T1088

Defense Evasion

Bypass User Account Control

T1088

Disabling Security Tools

T1089

Modify Registry

T1112

Web Service

T1102

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Defacement

T1491

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Modifies WinLogon for persistence

UAC bypass

Disables RegEdit via registry modification

Drops desktop.ini file(s)

Legitimate hosting services abused for malware hosting/C2

Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks

static1

urlscan1

behavioral1