Overview

overview

8

Static

static

3

MegaBoyVM.exe

windows10-2004-x64

8

Resubmissions

26/03/2024, 23:58

240326-31d1dafc263

26/03/2024, 23:55

240326-3yvkcaab6w3

25/03/2024, 23:41

240325-3pykmsdf4y8

25/03/2024, 23:38

240325-3msxdadf2y3

25/03/2024, 23:14

240325-28bdsaaf668

25/03/2024, 22:57

240325-2xmbxaae9510

25/03/2024, 22:54

240325-2vtm7sdc7x7

25/03/2024, 22:53

240325-2t9yssae663

Sharing

Copy URL Twitter E-mail

General

  • Target
    MegaBoy.rar
  • Size 453KB
  • Sample240325-28bdsaaf66
  • SHA256 538dd553c5c9e064cbdea35488d231a5ac1a269971c10ff9edd832ee4c3831d0
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
evasionransomware

Malware Config

Targets

    • Target
      MegaBoyVM.exe
    • Size 102KB
    • SHA256 8a16e748ca24d7f8a5205501fd381cef33c6bbbb2e715abf6b91f486ad6afd2d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    evasionransomware

    • Disables Task Manager via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks