Overview

overview

10

Static

static

1

zbxl.zip

windows10-1703-x64

10

Resubmissions

03-02-2024 16:36

240203-t4h9tsdff5 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zbxl.zip

  • Size

    43.8MB

  • Sample

    240203-t4h9tsdff5

  • MD5

    da596c5fa1bfe53dc6ef777e810c2e7d

  • SHA1

    dc756fddd264eaadcc0c8e8576d11259bbe1c150

  • SHA256

    eafd8f574ea7fd0f345eaa19eae8d0d78d5323c8154592c850a2d78a86817744

  • SHA512

    bb7a10c4d9decee9687dfba5987939d1f55c3966bd80d06103d4bde6f61df3957d89392ac185b96ac668bc794193319dad33e34dde199df91eb2981e7e5f9fc3

  • SSDEEP

    196608:rAA/coo9ZmMOfGI0QIdgCUlo1JKq5LJ2q82M/nSk827:rAHX9DQGI0Q321tr82MPl

Score
10/10
evasionpersistenceransomwaretrojan

Malware Config

Targets

    • Target

      zbxl.zip

    • Size

      43.8MB

    • MD5

      da596c5fa1bfe53dc6ef777e810c2e7d

    • SHA1

      dc756fddd264eaadcc0c8e8576d11259bbe1c150

    • SHA256

      eafd8f574ea7fd0f345eaa19eae8d0d78d5323c8154592c850a2d78a86817744

    • SHA512

      bb7a10c4d9decee9687dfba5987939d1f55c3966bd80d06103d4bde6f61df3957d89392ac185b96ac668bc794193319dad33e34dde199df91eb2981e7e5f9fc3

    • SSDEEP

      196608:rAA/coo9ZmMOfGI0QIdgCUlo1JKq5LJ2q82M/nSk827:rAHX9DQGI0Q321tr82MPl

    Score
    10/10
    evasionpersistenceransomwaretrojan

    • Modifies WinLogon for persistence

      persistence

    • UAC bypass

      evasiontrojan

    • Disables RegEdit via registry modification

      evasion

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks