Overview

overview

9

Static

static

1

Younx Tweaker.bat

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Younx Tweaker.bat
  • Size 395KB
  • Sample240503-wglsjsfa94
  • SHA256 ce9b6b6b79c2c37eb1da4d6dea06d31a671ea8275da6e2dc63e85ad90998ba42
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
discoveryevasionexecutionexploitransomware

Malware Config

Targets

    • Target
      Younx Tweaker.bat
    • Size 395KB
    • SHA256 ce9b6b6b79c2c37eb1da4d6dea06d31a671ea8275da6e2dc63e85ad90998ba42
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    discoveryevasionexecutionexploitransomware

    • Renames multiple (942) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Possible privilege escalation attempt

      exploit

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks