Overview

overview

9

Static

static

3

Satana.exe

windows11-21h2-x64

9

Resubmissions

11/01/2024, 16:01

240111-tgd2laahcq10

11/01/2024, 13:57

240111-q9c38ahbcn10

30/12/2023, 02:18

231230-crebnsadgm9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Satana.exe
  • Size 49KB
  • Sample231230-crebnsadgm
  • SHA256 683a09da219918258c58a7f61f7dc4161a3a7a377cf82a31b840baabfb9a4a96
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
discoveryransomware

Malware Config

Targets

    • Target
      Satana.exe
    • Size 49KB
    • SHA256 683a09da219918258c58a7f61f7dc4161a3a7a377cf82a31b840baabfb9a4a96
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    discoveryransomware

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Modifies file permissions

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks