Overview

overview

8

Static

static

3

Loader.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Loader.exe

  • Size

    23.2MB

  • Sample

    240614-3vcv5a1epa

  • MD5

    19a9e167ad3fc8a7da7dcb75196e6280

  • SHA1

    352447770d0a491f433eb49e8707567aa59ef294

  • SHA256

    f90b11d0ccf8781074f7ecff1ad13248600c1f24a36dcc5c2fc0ee5a88026692

  • SHA512

    7909a0184e3dd90db929316ce9c26d8ae3dacb31c39645b2ae2b6630914bce0ed6a38ac78426abdb61a8de3146a6e5e5c28d96857287955d7da3c114925a3b4a

  • SSDEEP

    393216:g2pN33U+n+no71RJ1s4DSUla8ympgT3bCEtx4Yk1+rKtQ1AQNson1:gy3k/no7oSlp5irsWSes8

Score
8/10
ransomware

Malware Config

Targets

    • Target

      Loader.exe

    • Size

      23.2MB

    • MD5

      19a9e167ad3fc8a7da7dcb75196e6280

    • SHA1

      352447770d0a491f433eb49e8707567aa59ef294

    • SHA256

      f90b11d0ccf8781074f7ecff1ad13248600c1f24a36dcc5c2fc0ee5a88026692

    • SHA512

      7909a0184e3dd90db929316ce9c26d8ae3dacb31c39645b2ae2b6630914bce0ed6a38ac78426abdb61a8de3146a6e5e5c28d96857287955d7da3c114925a3b4a

    • SSDEEP

      393216:g2pN33U+n+no71RJ1s4DSUla8ympgT3bCEtx4Yk1+rKtQ1AQNson1:gy3k/no7oSlp5irsWSes8

    Score
    8/10
    ransomware

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Sets desktop wallpaper using registry

      ransomware

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks