Overview

overview

10

Static

static

10

976eea667f...46.exe

windows7-x64

9

976eea667f...46.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    976eea667fd7a50a34fd49f61f80c45d7e3a6ea1dbaf32865f1a0bcc6be43b46

  • Size

    252KB

  • Sample

    240614-b2ybvstgmk

  • MD5

    377f12691fefa2d03c8ff56a5624ae36

  • SHA1

    a41a49f02d4e746f699f6c89e0e2be714f186b92

  • SHA256

    976eea667fd7a50a34fd49f61f80c45d7e3a6ea1dbaf32865f1a0bcc6be43b46

  • SHA512

    3781bbc3669d201e8dbe42ebb6dcde55f3588c4e80fff77082f87a90845cf47bc0111e87e6adece78e8c41ec03a0604f0c046b9029e9f7788b04894ce21cc7c1

  • SSDEEP

    6144:qJuXtXxog5E+FWPNfrf6yGEssQxNpbMjSYr:G8XNE+FuNfrSyGEssQJpYr

Score
10/10
ransomware

Malware Config

Targets

    • Target

      976eea667fd7a50a34fd49f61f80c45d7e3a6ea1dbaf32865f1a0bcc6be43b46

    • Size

      252KB

    • MD5

      377f12691fefa2d03c8ff56a5624ae36

    • SHA1

      a41a49f02d4e746f699f6c89e0e2be714f186b92

    • SHA256

      976eea667fd7a50a34fd49f61f80c45d7e3a6ea1dbaf32865f1a0bcc6be43b46

    • SHA512

      3781bbc3669d201e8dbe42ebb6dcde55f3588c4e80fff77082f87a90845cf47bc0111e87e6adece78e8c41ec03a0604f0c046b9029e9f7788b04894ce21cc7c1

    • SSDEEP

      6144:qJuXtXxog5E+FWPNfrf6yGEssQxNpbMjSYr:G8XNE+FuNfrSyGEssQJpYr

    Score
    9/10
    ransomware

    • Detects executables built or packed with MPress PE compressor

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

1
T1491

Resource Development

Reconnaissance

Tasks