Overview

overview

10

Static

static

1

DevilsRansom.bat

windows7-x64

10

DevilsRansom.bat

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    DevilsRansom.bat

  • Size

    2KB

  • Sample

    231117-f293wage9v

  • MD5

    accb994f867d9220d44459a0c8c04de7

  • SHA1

    411d8675cab78d319a38dbc9b056c45cc19eba63

  • SHA256

    36329399497e0e53e89d66a7ad23ce8094cd08601aac65173a4d73135f1d77ff

  • SHA512

    93558ca1e9e941dde6e77337a53f6929d9ef62d4b676490be78550ec0ae93b24545100cf15f8b8ed1138cd8fbe25a1399d862e1e40a2f6a826eca0619dad0f6e

Score
10/10
evasionransomwaretrojan

Malware Config

Targets

    • Target

      DevilsRansom.bat

    • Size

      2KB

    • MD5

      accb994f867d9220d44459a0c8c04de7

    • SHA1

      411d8675cab78d319a38dbc9b056c45cc19eba63

    • SHA256

      36329399497e0e53e89d66a7ad23ce8094cd08601aac65173a4d73135f1d77ff

    • SHA512

      93558ca1e9e941dde6e77337a53f6929d9ef62d4b676490be78550ec0ae93b24545100cf15f8b8ed1138cd8fbe25a1399d862e1e40a2f6a826eca0619dad0f6e

    Score
    10/10
    evasionransomwaretrojan

    • UAC bypass

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks