Overview

overview

9

Static

static

7

8d855c6677...0b.exe

windows7-x64

9

8d855c6677...0b.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    8d855c6677f3be815b18fead4d44cc0b
  • Size 492KB
  • Sample240203-2fwh9adhdp
  • SHA256 4a7c65317cad63431147585da414c586ab17f24e9eb246ab8c46d7d044345219
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
ransomwarevmprotect

Malware Config

Targets

    • Target
      8d855c6677f3be815b18fead4d44cc0b
    • Size 492KB
    • SHA256 4a7c65317cad63431147585da414c586ab17f24e9eb246ab8c46d7d044345219
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    ransomware

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks