87e5014fc9d0df5a1c8df5310df28cddcfce43167c06ab39ca8952711636ad3b | Triage

Sharing

General

Target

665477d7fba420ebc02e1afa0d90b5c6
Size

1.5MB
Sample

240118-3l31ysheg8
MD5

665477d7fba420ebc02e1afa0d90b5c6
SHA1

8a7869eb44138984cb867356d03b193d19a06c6a
SHA256

87e5014fc9d0df5a1c8df5310df28cddcfce43167c06ab39ca8952711636ad3b
SHA512

e5e6066b69c8dee0308567e8591e4d03a408a8d19aa1744ac9c7636008e64717a308bbdc6437e8f87eb0bb498927d1fdb6078e55a3fae3e5b6e632419d9699ea
SSDEEP

3072:ygV7qR3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBwb91W:L1XlKgzelZNQSBQGH/CSpWqTDmQ

Score

6^/10

ransomware

Malware Config

Targets

- Target
  
  665477d7fba420ebc02e1afa0d90b5c6
- Size
  
  1.5MB
- MD5
  
  665477d7fba420ebc02e1afa0d90b5c6
- SHA1
  
  8a7869eb44138984cb867356d03b193d19a06c6a
- SHA256
  
  87e5014fc9d0df5a1c8df5310df28cddcfce43167c06ab39ca8952711636ad3b
- SHA512
  
  e5e6066b69c8dee0308567e8591e4d03a408a8d19aa1744ac9c7636008e64717a308bbdc6437e8f87eb0bb498927d1fdb6078e55a3fae3e5b6e632419d9699ea
- SSDEEP
  
  3072:ygV7qR3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBwb91W:L1XlKgzelZNQSBQGH/CSpWqTDmQ
Score

6^/10

ransomware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2