0ec6d8f71109d362934d6db488b59449bd92a5da270bc9401be023eca17e1623 | Triage

Sharing

General

Target

NEAS.9c0125559238d1d48dc6e83472606830.exe
Size

353KB
Sample

231016-w5wyesgf9s
MD5

9c0125559238d1d48dc6e83472606830
SHA1

a324a24d7902575b423847e396ca5c37f153b08f
SHA256

0ec6d8f71109d362934d6db488b59449bd92a5da270bc9401be023eca17e1623
SHA512

dcf8670a23422695914a13780867b1265a0ded105023eae59db3620fd1d53b81a81933b90865ea90b09e4bd9f4fe36b614a35686b98e74cb3b90e5dc09836abe
SSDEEP

6144:Z1XlKgzelZNQSBQGH/CSpWqTDKJcfh2m71Z3mQ:ZUfBQGH6Sfvp71ZWQ

Score

6^/10

ransomware

Malware Config

Targets

- Target
  
  NEAS.9c0125559238d1d48dc6e83472606830.exe
- Size
  
  353KB
- MD5
  
  9c0125559238d1d48dc6e83472606830
- SHA1
  
  a324a24d7902575b423847e396ca5c37f153b08f
- SHA256
  
  0ec6d8f71109d362934d6db488b59449bd92a5da270bc9401be023eca17e1623
- SHA512
  
  dcf8670a23422695914a13780867b1265a0ded105023eae59db3620fd1d53b81a81933b90865ea90b09e4bd9f4fe36b614a35686b98e74cb3b90e5dc09836abe
- SSDEEP
  
  6144:Z1XlKgzelZNQSBQGH/CSpWqTDKJcfh2m71Z3mQ:ZUfBQGH6Sfvp71ZWQ
Score

6^/10

ransomware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2