Overview

overview

7

Static

static

3

0c219afffa...93.exe

windows7-x64

3

0c219afffa...93.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c219afffaee5dfb35d1726173e24993

  • Size

    199KB

  • Sample

    231230-dakb2afadj

  • MD5

    0c219afffaee5dfb35d1726173e24993

  • SHA1

    eb41c3817b0f1ee112071860698b5f100b9db3d3

  • SHA256

    696593a32d04a0540bb16619a5d2d032a074329b472fe979ab0ec7d109a26226

  • SHA512

    e3ba8bbd34e7f42d7d1b9e48212a60769c2cd34b127e78479fce241148e3c896f5305ba78a020c613c23b70f79ebd7d4202eb43003693bb8f1c9874684b8b8f9

  • SSDEEP

    6144:6svnW0jvGFIJYR/K279YabW2xyN7rxR4q:6svn5OFr/hXW2xyhrxqq

Score
7/10
discoverypersistenceransomware

Malware Config

Targets

    • Target

      0c219afffaee5dfb35d1726173e24993

    • Size

      199KB

    • MD5

      0c219afffaee5dfb35d1726173e24993

    • SHA1

      eb41c3817b0f1ee112071860698b5f100b9db3d3

    • SHA256

      696593a32d04a0540bb16619a5d2d032a074329b472fe979ab0ec7d109a26226

    • SHA512

      e3ba8bbd34e7f42d7d1b9e48212a60769c2cd34b127e78479fce241148e3c896f5305ba78a020c613c23b70f79ebd7d4202eb43003693bb8f1c9874684b8b8f9

    • SSDEEP

      6144:6svnW0jvGFIJYR/K279YabW2xyN7rxR4q:6svn5OFr/hXW2xyhrxqq

    Score
    7/10
    discoverypersistenceransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks