Overview

overview

10

Static

static

1

URLScan

urlscan

1

http://malwat.ch

windows10-1703-x64

http://malwat.ch

windows7-x64

6

http://malwat.ch

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://malwat.ch

  • Sample

    230331-xh15asce93

Score
10/10
evasionpersistenceransomwaretrojan

Malware Config

Targets

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Modify Registry

4
T1112

Bypass User Account Control

1
T1088

Disabling Security Tools

1
T1089

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Defacement

1
T1491

Tasks