Overview

overview

10

Static

static

7

Stub.exe

windows7-x64

10

Resubmissions

17/05/2024, 10:14

240517-l9p1kadb8x 10

17/05/2024, 10:06

240517-l5a1vadd26 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Stub.vexe

  • Size

    471KB

  • Sample

    240517-l9p1kadb8x

  • MD5

    3d5dd0377d67ac5b82f4fb976757f8bb

  • SHA1

    8ba1e614712f1d36e68a9e7a1c5ed2defb974e50

  • SHA256

    bee8ffd8698ff75f8c46b2fad4fba84fecf4baa1b6669128a181055605bbe922

  • SHA512

    ffb195610399624106ada3d2f61bad97a768b1d725cbea9fc2126d95a8d6d31a42398fa6891bcf2bf274670fbcbb2afc8823e303632382c71230fa9c6035c42f

  • SSDEEP

    12288:Ct8YAesm47kueWUW79lsRqnbTeXZJIj3LvMb4WafphI8tTDOI2u:IsBY49tbGZOqqjIOqI2

Score
10/10
defense_evasionevasionexecutionimpactransomwaretrojanupx

Malware Config

Targets

    • Target

      Stub.vexe

    • Size

      471KB

    • MD5

      3d5dd0377d67ac5b82f4fb976757f8bb

    • SHA1

      8ba1e614712f1d36e68a9e7a1c5ed2defb974e50

    • SHA256

      bee8ffd8698ff75f8c46b2fad4fba84fecf4baa1b6669128a181055605bbe922

    • SHA512

      ffb195610399624106ada3d2f61bad97a768b1d725cbea9fc2126d95a8d6d31a42398fa6891bcf2bf274670fbcbb2afc8823e303632382c71230fa9c6035c42f

    • SSDEEP

      12288:Ct8YAesm47kueWUW79lsRqnbTeXZJIj3LvMb4WafphI8tTDOI2u:IsBY49tbGZOqqjIOqI2

    Score
    10/10
    defense_evasionevasionexecutionimpactransomwaretrojanupx

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Modifies boot configuration data using bcdedit

      ransomwareevasion

    • Disables use of System Restore points

      evasion

    • Deletes itself

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks