troldesh | hxxps://github[.]com/Endermanch/MalwareDatabase | Triage

Submit
Reports

Overview

overview

Static

static

1

URLScan

urlscan

https://github.com/E...

windows10-2004-x64

Sharing

General

Target

https://github.com/Endermanch/MalwareDatabase
Sample

240223-mgngpsfc33

Score

10^/10

troldesh persistence ransomware trojan upx

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://github.com/Endermanch/MalwareDatabase

Resource

win10v2004-20240221-en

troldesh persistence ransomware trojan upx

windows10-2004-x64

11 signatures

300 seconds

Malware Config

Targets

- Target
  
  https://github.com/Endermanch/MalwareDatabase
Score

10^/10

troldesh persistence ransomware trojan upx
- Troldesh, Shade, Encoder.858
  Troldesh is a ransomware spread by malspam.
  ransomware trojan troldesh
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

troldeshpersistenceransomwaretrojanupx

© 2018-2025

Terms | Privacy