General

  • Target

    95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66

  • Size

    233KB

  • Sample

    230327-j6c6gsce22

  • MD5

    fac9cffeb62bbbc64879251cef8f0cb4

  • SHA1

    949780ecf307a4ebb08b3d64a7f66fc51d756409

  • SHA256

    95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66

  • SHA512

    411c4b2ce9d67580f66391a8f50f59b79041632512527f8df28b5598718a5ddd3a63e06dc388d2bd6d3aa0849d34a114658104ed05a50d6282dd0b24f7b6f66f

  • SSDEEP

    6144:ax7axHUjUgjkVM3ySQb46hmcSOL1QoNyh:ajJkVhpb46hnSM1QE

Score
8/10

Malware Config

Targets

    • Target

      95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66

    • Size

      233KB

    • MD5

      fac9cffeb62bbbc64879251cef8f0cb4

    • SHA1

      949780ecf307a4ebb08b3d64a7f66fc51d756409

    • SHA256

      95cead65319b5eb6b5da87fb0ee626d711903754bcbd1f7f843c639ea7acba66

    • SHA512

      411c4b2ce9d67580f66391a8f50f59b79041632512527f8df28b5598718a5ddd3a63e06dc388d2bd6d3aa0849d34a114658104ed05a50d6282dd0b24f7b6f66f

    • SSDEEP

      6144:ax7axHUjUgjkVM3ySQb46hmcSOL1QoNyh:ajJkVhpb46hnSM1QE

    Score
    8/10
    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops startup file

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks