1550ad6450fa1249d7df59437ff913f77e676b0058827f44f5056e3f9bea777e | Triage

Sharing

General

Target

Unfixable.exe
Size

5.1MB
Sample

240522-r2mhcsef69
MD5

8dd2a995e10ef27bcda77db5d072e2b0
SHA1

5606060fe0033e9688604b424968175d3c1dc99e
SHA256

1550ad6450fa1249d7df59437ff913f77e676b0058827f44f5056e3f9bea777e
SHA512

da79ed9e270764b3cd277c9612457f937e2508f22dea1a9f65130a8f82749b72d70bf28129d8e550bcb16380ff9d60113e42a6d4b7370e09a7178f5796c4b43a
SSDEEP

98304:l4N+EvlU/hy5t0gA8pyj6V3O0FwEAZIv6EYd9+wvWe/uejc0wH1NXGp:SN+GYgA8kjqrvAZgpYd9ht/bA0wH1+

Score

9^/10

defense_evasion discovery execution impact ransomware

Malware Config

Targets

- Target
  
  Unfixable.exe
- Size
  
  5.1MB
- MD5
  
  8dd2a995e10ef27bcda77db5d072e2b0
- SHA1
  
  5606060fe0033e9688604b424968175d3c1dc99e
- SHA256
  
  1550ad6450fa1249d7df59437ff913f77e676b0058827f44f5056e3f9bea777e
- SHA512
  
  da79ed9e270764b3cd277c9612457f937e2508f22dea1a9f65130a8f82749b72d70bf28129d8e550bcb16380ff9d60113e42a6d4b7370e09a7178f5796c4b43a
- SSDEEP
  
  98304:l4N+EvlU/hy5t0gA8pyj6V3O0FwEAZIv6EYd9+wvWe/uejc0wH1NXGp:SN+GYgA8kjqrvAZgpYd9ht/bA0wH1+
Score

9^/10

defense_evasion discovery execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Windows Management Instrumentation

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

File and Directory Permissions Modification

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Inhibit System Recovery

Resource Development

Reconnaissance

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionimpactransomware