Overview

overview

10

Static

static

10

Ransomware.exe

windows7-x64

10

Ransomware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ransomware.exe

  • Size

    112KB

  • Sample

    230410-rtj29shh95

  • MD5

    5505bbddc971765df496f907b222c2fb

  • SHA1

    de3c8668481fa3dacf2052951d45a9c3a388575d

  • SHA256

    a5498ad33354516c8a2affe2de3e3cf515aafb252d5647d0f8c6efe4b46806a4

  • SHA512

    7bec3c8dfa0f63db2ae182805dff0602f55b6e419f30b279992d891542f128c121542a05c214d9436f6baeae895cf09027c5d308731682df41d84e6283fd08eb

  • SSDEEP

    1536:IsCK9eaNw9AFBPGMPYnQZZZZZZZZZonTZ6PhCOybwXuzIBnwbp3r+hX1dZji:xCSbwmFBPGtTZWhybwX7Bo36TZji

Score
10/10
eternityransomware

Malware Config

Targets

    • Target

      Ransomware.exe

    • Size

      112KB

    • MD5

      5505bbddc971765df496f907b222c2fb

    • SHA1

      de3c8668481fa3dacf2052951d45a9c3a388575d

    • SHA256

      a5498ad33354516c8a2affe2de3e3cf515aafb252d5647d0f8c6efe4b46806a4

    • SHA512

      7bec3c8dfa0f63db2ae182805dff0602f55b6e419f30b279992d891542f128c121542a05c214d9436f6baeae895cf09027c5d308731682df41d84e6283fd08eb

    • SSDEEP

      1536:IsCK9eaNw9AFBPGMPYnQZZZZZZZZZonTZ6PhCOybwXuzIBnwbp3r+hX1dZji:xCSbwmFBPGtTZWhybwX7Bo36TZji

    Score
    10/10
    eternityransomware

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks