General
- Target PolyRansom.zip
- Size 130KB
- Sample240302-t96mbafa7w
- SHA256 ed8d4bb55444595fabb8172ee24fa2707ab401324f6f4d6b30a3cf04a51212d4
- MD5 7a5ab2552c085f01a4d3c5f9d7718b99
- SHA1 e148ca4cce695c19585b7815936f8e05be22eb77
- SHA512 33a0fe5830e669d9fafbc6dbe1c8d1bd13730552fba5798530eeb652bb37dcbc614555187e2cfd055f3520e5265fc4b1409de88dccd4ba9fe1e12d3c793ef632
- SSDEEP 3072:veAhzA234eL3kq97n2PxqzYwiYjeKPdwekrkb:veEhJ1keyKPz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
11 signatures
150 seconds
Malware Config
Targets
-
- Target [email protected]
- Size 220KB
- SHA256 1898f2cae1e3824cb0f7fd5368171a33aba179e63501e480b4da9ea05ebf0423
- MD5 3ed3fb296a477156bc51aba43d825fc0
- SHA1 9caa5c658b1a88fee149893d3a00b34a8bb8a1a6
- SHA512 dc3d6e409cee4d54f48d1a25912243d07e2f800578c8e0e348ce515a047ecf5fa3089b46284e0956bbced345957a000eecdc082e6f3060971759d70a14c1c97e
- SSDEEP 3072:EJv/3Ppzq+M4Lh5VWK5qlYRV+hvuFiweXXbGgL90v5mq33Z3:8hzEA5GlYMWFBeXvx0c+3
- MD5 SHA1 SHA512 SSDEEP
Score10/10Modifies visibility of file extensions in Explorer
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1