Extracted

• • Target

    THE GAME.bat

  • Size

    9KB

  • MD5

    906123d2f74595fb0c2639f824a7396c

  • SHA1

    779343762d325653e363e3097b5774126a58ac91

  • SHA256

    1ed5fd8c44c9dbc6d6fdff02bd8e774dbb47c93b97cc89bee7376c9db15f49c9

  • SHA512

    6c56e1af7ae3818a06e490d8fcef2040d9ac422ca6288b8a770528451fcb482508f99408b57d246ab012f62a8ddb792b9cf016a5e3556799c493bd4390502a2b

  • SSDEEP

    192:5eR/b5lTUeT5stFiCNRWzWUCNRWzWnMT3RV3yqDZlo0o/hr+pMnKFYjQF2eiwAuc:5eRnVWiCO6UCO6nMTBV3yqDZej/hr+p0

  Score

  10^/10

  adwareevasionexecutionpersistenceransomwarestealer

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Blocklisted process makes network request

  • Disables Task Manager via registry modification

    evasion

  • Manipulates Digital Signatures

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

  • Modifies Installed Components in the registry

    persistence

  • Modifies Windows Firewall

    evasion

  • Registers new Print Monitor

    persistence

  • Sets file execution options in registry

    persistence

  • Modifies system executable filetype association

    persistence

  • Registers COM server for autorun

    persistence

  • Adds Run key to start application

    persistence

  • Installs/modifies Browser Helper Object

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1