Overview

overview

10

Static

static

1

Build 29.exe

windows10-2004-x64

10

Resubmissions

21/04/2023, 18:03

230421-wnchfshb99 10

15/04/2023, 20:14

230415-yzz41ahb5z 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Build 29.exe

  • Size

    1000KB

  • Sample

    230421-wnchfshb99

  • MD5

    5e2555aafd40aa3759356ba7d0d4bf94

  • SHA1

    7a0efbc6eced21266b4dde7917b56786bbff4d72

  • SHA256

    90c72f3e02ae7a7811e1c73e1694ab2a89df2a960d858acc4230c025d2e63010

  • SHA512

    806e44614c0277ea069024243a2e3f17a66236ad9c6764c632689027d406f844c8d4c06a764e03bd4e65d77de595894e8e4df4f8ed9edcc8017629ade701f85e

  • SSDEEP

    24576:pLllLl7CEtNeO/zwj6WM1ZfBelVVqCC1iMs16AQ:BllLtg8nWKG0CCb0XQ

Score
10/10
evasionransomwaretrojan

Malware Config

Targets

    • Target

      Build 29.exe

    • Size

      1000KB

    • MD5

      5e2555aafd40aa3759356ba7d0d4bf94

    • SHA1

      7a0efbc6eced21266b4dde7917b56786bbff4d72

    • SHA256

      90c72f3e02ae7a7811e1c73e1694ab2a89df2a960d858acc4230c025d2e63010

    • SHA512

      806e44614c0277ea069024243a2e3f17a66236ad9c6764c632689027d406f844c8d4c06a764e03bd4e65d77de595894e8e4df4f8ed9edcc8017629ade701f85e

    • SSDEEP

      24576:pLllLl7CEtNeO/zwj6WM1ZfBelVVqCC1iMs16AQ:BllLtg8nWKG0CCb0XQ

    Score
    10/10
    evasionransomwaretrojan

    • UAC bypass

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks whether UAC is enabled

      evasiontrojan

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks