Overview

overview

10

Static

static

1

download.jpg

windows10-1703-x64

Resubmissions

10/05/2023, 14:04

230510-rdf1nsgd57 7

10/05/2023, 14:00

230510-ra5vmaaa8s 8

10/05/2023, 13:57

230510-q9ks3aaa61 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    download.jpeg

  • Size

    2KB

  • Sample

    230510-q9ks3aaa61

  • MD5

    e20e1a9a82d3073f7c1e09f5f48e69ea

  • SHA1

    57e07e900e2198ccd8b3c38a2b17f0e7cd885015

  • SHA256

    7194b16c7121b03a0ad460c94b5b9274b4112d627ee206c7f4a17623edba05ae

  • SHA512

    4d4bfe35daf3fef269c7542267fdfe51c4b8695d80391d6afed5d6faad56c7d483c163f6bc3ac5fd0a60612f0e49398c5d1174aa5e694280e4bdda2da8b7ad8e

Score
10/10
evasionpersistenceransomwaretrojan

Malware Config

Targets

    • Target

      download.jpeg

    • Size

      2KB

    • MD5

      e20e1a9a82d3073f7c1e09f5f48e69ea

    • SHA1

      57e07e900e2198ccd8b3c38a2b17f0e7cd885015

    • SHA256

      7194b16c7121b03a0ad460c94b5b9274b4112d627ee206c7f4a17623edba05ae

    • SHA512

      4d4bfe35daf3fef269c7542267fdfe51c4b8695d80391d6afed5d6faad56c7d483c163f6bc3ac5fd0a60612f0e49398c5d1174aa5e694280e4bdda2da8b7ad8e

    Score
    10/10
    evasionpersistenceransomwaretrojan

    • Modifies WinLogon for persistence

      persistence

    • UAC bypass

      evasiontrojan

    • Disables RegEdit via registry modification

      evasion

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks