General

  • Target
    PolyRansom.zip
  • Size 130KB
  • Sample240302-t96mbafa7w
  • SHA256 ed8d4bb55444595fabb8172ee24fa2707ab401324f6f4d6b30a3cf04a51212d4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      [email protected]
    • Size 220KB
    • SHA256 1898f2cae1e3824cb0f7fd5368171a33aba179e63501e480b4da9ea05ebf0423
    • MD5 SHA1 SHA512 SSDEEP
    • Modifies visibility of file extensions in Explorer

    • UAC bypass

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks