47f6d3a11ffd015413ffb96432ec1f980fba5dd084990dd61a00342c5f6da7f8 | Triage™

Login
Reports

Overview

overview

Static

static

1

NoEscape.zip

windows10-1703-x64

Resubmissions

06/01/2025, 23:06

250106-23f23stqgn10

31/03/2023, 20:16

230331-y2e7lsdb3810

31/03/2023, 20:11

230331-yyjqmada991

Sharing

Copy URL Twitter E-mail

General

Target
NoEscape.zip
Size 616KB
Sample230331-y2e7lsdb38
SHA256 47f6d3a11ffd015413ffb96432ec1f980fba5dd084990dd61a00342c5f6da7f8
MD5 ef4fdf65fc90bfda8d1d2ae6d20aff60
SHA1 9431227836440c78f12bfb2cb3247d59f4d4640b
SHA512 6f560fa6dc34bfe508f03dabbc395d46a7b5ba9d398e03d27dbacce7451a3494fbf48ccb1234d40746ac7fe960a265776cb6474cf513adb8ccef36206a20cbe9
SSDEEP 12288:1PQuO1JLx2auoA82iqOxdOc7XPkmpOw6mqc5m937hnTMktj1H:1PVqJx2auYqw7dOw6mql3nNBd
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

evasion persistence ransomware trojan

Static task

static1

Behavioral task

behavioral1

Sample

NoEscape.zip

Resource

win10-20230220-en

windows10-1703-x64

16 signatures

150 seconds

evasion persistence ransomware trojan

Malware Config

Targets

- Target
  NoEscape.zip
- Size 616KB
- SHA256 47f6d3a11ffd015413ffb96432ec1f980fba5dd084990dd61a00342c5f6da7f8
- MD5 ef4fdf65fc90bfda8d1d2ae6d20aff60
- SHA1 9431227836440c78f12bfb2cb3247d59f4d4640b
- SHA512 6f560fa6dc34bfe508f03dabbc395d46a7b5ba9d398e03d27dbacce7451a3494fbf48ccb1234d40746ac7fe960a265776cb6474cf513adb8ccef36206a20cbe9
- SSDEEP 12288:1PQuO1JLx2auoA82iqOxdOc7XPkmpOw6mqc5m937hnTMktj1H:1PVqJx2auYqw7dOw6mql3nNBd
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

evasion persistence ransomware trojan
- Modifies WinLogon for persistence
  persistence
- UAC bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
- Modifies WinLogon
  persistence
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

evasionpersistenceransomwaretrojan

© 2018-2026

Terms | Privacy