bca3c25a89e418ed29cf91c44140814bce0efd2d0f3ce5a7be8370842d855de8

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29/05/2024, 17:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear.exe
Size

408KB
MD5

958af5947aa2f49faef7910fd2b1bd4a
SHA1

beb05cef681c9c697081ec105ec811e3c3245a72
SHA256

bca3c25a89e418ed29cf91c44140814bce0efd2d0f3ce5a7be8370842d855de8
SHA512

c97d52aab27a134fca1b37cc5edd6ef0eef9e1389eda5dabc4bf9ffbcede075707e34cd411dbf24327d0178a939b05c136e17636966eee2d67c12a6ed377d1e7
SSDEEP

6144:hRmyXGDbGHvNfF3MNsnM+lDAAPRmyXGDbGHvNfF3MNsn:hEyMaP9F397dAAPEyMaP9F39

Score

5^/10

ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\WallpaperImage.jpg"	2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear.exe

Modifies Control Panel 1 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Control Panel\Desktop\WallpaperStyle = "2"	2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear.exe"
1⤵
- Sets desktop wallpaper using registry
- Modifies Control Panel
PID:2312

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact