318ee8b6d307571b5c6adc16da82a3756cc2ab245842b6bbc1d72dbe08d625eb | Triage

Sharing

General

Target

7e3c3bc92e5dc8288a4978ff91cf7fa7_JC.exe
Size

258KB
Sample

231012-b4zygage8x
MD5

7e3c3bc92e5dc8288a4978ff91cf7fa7
SHA1

18aa60976a1bf9d43dd39f98ac2e1cc7ff6839f6
SHA256

318ee8b6d307571b5c6adc16da82a3756cc2ab245842b6bbc1d72dbe08d625eb
SHA512

5dd18ed53cf95a4c0682fd66ccca962d43bb20776e1282dfb58ee074e63f4015a5368f88c22229be04998efc8df2ad9e84a974acf9d9d1cf87be0f69be37a10c
SSDEEP

3072:7QXi3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB2:29lKgzelZNQSBQGH/CSpWqT

Score

6^/10

ransomware

Malware Config

Targets

- Target
  
  7e3c3bc92e5dc8288a4978ff91cf7fa7_JC.exe
- Size
  
  258KB
- MD5
  
  7e3c3bc92e5dc8288a4978ff91cf7fa7
- SHA1
  
  18aa60976a1bf9d43dd39f98ac2e1cc7ff6839f6
- SHA256
  
  318ee8b6d307571b5c6adc16da82a3756cc2ab245842b6bbc1d72dbe08d625eb
- SHA512
  
  5dd18ed53cf95a4c0682fd66ccca962d43bb20776e1282dfb58ee074e63f4015a5368f88c22229be04998efc8df2ad9e84a974acf9d9d1cf87be0f69be37a10c
- SSDEEP
  
  3072:7QXi3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB2:29lKgzelZNQSBQGH/CSpWqT
Score

6^/10

ransomware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2