Overview

overview

10

Static

static

1

186b16a81a...05.exe

windows7-x64

10

Resubmissions

07-04-2024 06:22

240407-g46nxafd94 10

07-04-2024 06:22

240407-g4x2rsfd88 10

07-04-2024 06:21

240407-g4sgaafd85 10

07-04-2024 06:21

240407-g4m7kaeh9t 10

30-12-2023 12:23

231230-pkz11sgdal 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    186b16a81a4742afd8bd53590ff2e705

  • Size

    1.1MB

  • Sample

    240407-g4m7kaeh9t

  • MD5

    186b16a81a4742afd8bd53590ff2e705

  • SHA1

    3ec4410a8598ef780b2eb4ac5f0dc3113619f0f5

  • SHA256

    6d6089fee5f86170c5b3485a626cc6073631d09004f298da7b690b12a9482086

  • SHA512

    6ba11e6a2dd9fa4db11acb39f7cf7924f0a3bc720592891f0293cf1f2b002c06c052717cb129182f39fbba32196b96f392ada1fb664933121ec0ccf16478b16f

  • SSDEEP

    24576:0HtrdKYVVSrqGDohJ3STZG8vIn/sCBGnWsY03++:0HtV7GwBSTc8An/4YJ+

Score
10/10
troldeshdiscoverypersistenceransomwarespywarestealertrojanupx

Malware Config

Targets

    • Target

      186b16a81a4742afd8bd53590ff2e705

    • Size

      1.1MB

    • MD5

      186b16a81a4742afd8bd53590ff2e705

    • SHA1

      3ec4410a8598ef780b2eb4ac5f0dc3113619f0f5

    • SHA256

      6d6089fee5f86170c5b3485a626cc6073631d09004f298da7b690b12a9482086

    • SHA512

      6ba11e6a2dd9fa4db11acb39f7cf7924f0a3bc720592891f0293cf1f2b002c06c052717cb129182f39fbba32196b96f392ada1fb664933121ec0ccf16478b16f

    • SSDEEP

      24576:0HtrdKYVVSrqGDohJ3STZG8vIn/sCBGnWsY03++:0HtV7GwBSTc8An/4YJ+

    Score
    10/10
    troldeshdiscoverypersistenceransomwarespywarestealertrojanupx

    • Troldesh, Shade, Encoder.858

      Troldesh is a ransomware spread by malspam.

      ransomwaretrojantroldesh

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks