Overview

overview

10

Static

static

1

IMG_202312...41.jpg

windows11-21h2-x64

Resubmissions

19/02/2024, 05:48

240219-ghyq6saf66 8

19/02/2024, 05:38

240219-gbw9rsab8v 3

19/02/2024, 05:31

240219-f7y8kaae38 8

19/02/2024, 05:09

240219-ftb6wahh9t 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    IMG_20231231_153541.jpg

  • Size

    63KB

  • Sample

    240219-ftb6wahh9t

  • MD5

    42a51a3f2105df7dfd16450ab7863dfb

  • SHA1

    849051ef17637b751e5e018fb5b1a77d102541bf

  • SHA256

    8584ac470dde21246c01b8819f56bc2386c9c5d64757c0e03ae469b67e997b9d

  • SHA512

    85d1580e573ec5fe509b79574bb7e4a111fda7da0e78cc4bc564d60928ad2bd0f7e7309d57a7d1b572cb1572fa642fb6658c408f44d4af663484d502ee42661a

  • SSDEEP

    1536:0DYq8GJNt7h8HhW733ITf2KnHicJouRnQddVY7T8q:0DR8GxEW73SVrJo2QddVY7TX

Score
10/10
evasionpersistenceransomwaretrojan

Malware Config

Targets

    • Target

      IMG_20231231_153541.jpg

    • Size

      63KB

    • MD5

      42a51a3f2105df7dfd16450ab7863dfb

    • SHA1

      849051ef17637b751e5e018fb5b1a77d102541bf

    • SHA256

      8584ac470dde21246c01b8819f56bc2386c9c5d64757c0e03ae469b67e997b9d

    • SHA512

      85d1580e573ec5fe509b79574bb7e4a111fda7da0e78cc4bc564d60928ad2bd0f7e7309d57a7d1b572cb1572fa642fb6658c408f44d4af663484d502ee42661a

    • SSDEEP

      1536:0DYq8GJNt7h8HhW733ITf2KnHicJouRnQddVY7T8q:0DR8GxEW73SVrJo2QddVY7TX

    Score
    10/10
    evasionpersistenceransomwaretrojan

    • Modifies WinLogon for persistence

      persistence

    • UAC bypass

      evasiontrojan

    • Disables RegEdit via registry modification

      evasion

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks