troldesh | 3d4d462dbc7dbfd12af693f8176e9fd6814560ed763448fa75fa6dad026567f4

Target

3d4d462dbc7dbfd12af693f8176e9fd6814560ed763448fa75fa6dad026567f4
Size

1.2MB
Sample

240415-n1cd8aga41
MD5

c722f0a20113bb1488382daefda9a358
SHA1

4d269f0ec76a564f952c348b32a3b59c34bab2b4
SHA256

3d4d462dbc7dbfd12af693f8176e9fd6814560ed763448fa75fa6dad026567f4
SHA512

534a1acdd94846138086a9912f8c2bcf154e0765f80d0a8432004687c76909fa9ab95adef24b8ec67b10cdff2aa59c50d0bf086e034e3b12f4ea484c7605e991
SSDEEP

24576:IIvEq8jlEBPkNShzxh7QjO+NhXh1l/JFfnE88smv:najiNOsbQjOuXh1lvESw

Score

10^/10

Malware Config

Targets

- Target
  
  3d4d462dbc7dbfd12af693f8176e9fd6814560ed763448fa75fa6dad026567f4
- Size
  
  1.2MB
- MD5
  
  c722f0a20113bb1488382daefda9a358
- SHA1
  
  4d269f0ec76a564f952c348b32a3b59c34bab2b4
- SHA256
  
  3d4d462dbc7dbfd12af693f8176e9fd6814560ed763448fa75fa6dad026567f4
- SHA512
  
  534a1acdd94846138086a9912f8c2bcf154e0765f80d0a8432004687c76909fa9ab95adef24b8ec67b10cdff2aa59c50d0bf086e034e3b12f4ea484c7605e991
- SSDEEP
  
  24576:IIvEq8jlEBPkNShzxh7QjO+NhXh1l/JFfnE88smv:najiNOsbQjOuXh1lvESw
Score

10^/10

troldesh discovery persistence ransomware spyware stealer trojan upx
- Troldesh, Shade, Encoder.858
  Troldesh is a ransomware spread by malspam.
  ransomware trojan troldesh
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Modifies Installed Components in the registry
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2 behavioral3 behavioral4