25e6e293d8606938401318306e441b73eb4dcbd25855dbb348931c12b8f2448a | Triage

Sharing

General

Target

e24ae7e5893261f10a932d5c3924f8d7
Size

69KB
Sample

240327-zd4ezaeh4t
MD5

e24ae7e5893261f10a932d5c3924f8d7
SHA1

5674918a9336eaef15e3ccbda33eefc5c741705f
SHA256

25e6e293d8606938401318306e441b73eb4dcbd25855dbb348931c12b8f2448a
SHA512

96e37cf219be9f45a3bd61615f6bad7c6df778e479278d9b272e416f2b480256b254ec161380ef95910ad8548319a0957a661c3b2b384c2719298efb6764eeff
SSDEEP

1536:6JR2po8raAZ765kj02XUY6jhQ8C6woaXyygKY4+4WMd:WAS8rpWyjncl7pHygj4Rd

Score

10^/10

evasion persistence ransomware trojan

Malware Config

Targets

- Target
  
  e24ae7e5893261f10a932d5c3924f8d7
- Size
  
  69KB
- MD5
  
  e24ae7e5893261f10a932d5c3924f8d7
- SHA1
  
  5674918a9336eaef15e3ccbda33eefc5c741705f
- SHA256
  
  25e6e293d8606938401318306e441b73eb4dcbd25855dbb348931c12b8f2448a
- SHA512
  
  96e37cf219be9f45a3bd61615f6bad7c6df778e479278d9b272e416f2b480256b254ec161380ef95910ad8548319a0957a661c3b2b384c2719298efb6764eeff
- SSDEEP
  
  1536:6JR2po8raAZ765kj02XUY6jhQ8C6woaXyygKY4+4WMd:WAS8rpWyjncl7pHygj4Rd
Score

10^/10

evasion persistence ransomware trojan
- Windows security bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Modifies Shared Task Scheduler registry keys
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

evasionpersistenceransomwaretrojan

behavioral2