fd0d77a561f6424bcbe5af702081232d82b22cb39237d4f1e74b679c5244fdcd | Triage

Sharing

General

Target

NEAS.6729c44721ae42445aba2a41440dd770.exe
Size

213KB
Sample

231013-y71eqsce35
MD5

6729c44721ae42445aba2a41440dd770
SHA1

f780beace5854ba34f6d15cc5bab91091ac771a1
SHA256

fd0d77a561f6424bcbe5af702081232d82b22cb39237d4f1e74b679c5244fdcd
SHA512

db2a19a21649bc42e00e7c4a2994a91c4f32ca0eb246d9b01e42fe41c7401a3a0d603677ffbbd4dc852110c73d02d6bde12805318a738c18070b4b7d248edcc5
SSDEEP

3072:UMZSE872f0+hkJBeY7YwnUZ8+dC7OKOR7Yn2uYCsnOHPuB6s11mGZGW+t:rZSE8UGJwiYwUfWeR7oHYnOW111mFW+

Score

6^/10

ransomware

Malware Config

Targets

- Target
  
  NEAS.6729c44721ae42445aba2a41440dd770.exe
- Size
  
  213KB
- MD5
  
  6729c44721ae42445aba2a41440dd770
- SHA1
  
  f780beace5854ba34f6d15cc5bab91091ac771a1
- SHA256
  
  fd0d77a561f6424bcbe5af702081232d82b22cb39237d4f1e74b679c5244fdcd
- SHA512
  
  db2a19a21649bc42e00e7c4a2994a91c4f32ca0eb246d9b01e42fe41c7401a3a0d603677ffbbd4dc852110c73d02d6bde12805318a738c18070b4b7d248edcc5
- SSDEEP
  
  3072:UMZSE872f0+hkJBeY7YwnUZ8+dC7OKOR7Yn2uYCsnOHPuB6s11mGZGW+t:rZSE8UGJwiYwUfWeR7oHYnOW111mFW+
Score

6^/10

ransomware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2