Overview

overview

10

Static

static

1

URLScan

urlscan

1

http://example.com

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://example.com

  • Sample

    240625-azrwma1bmd

Score
10/10
evasionpersistenceprivilege_escalationransomware

Malware Config

Targets

    • Target

      http://example.com

    Score
    10/10
    evasionpersistenceprivilege_escalationransomware

    • Modifies visibility of file extensions in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Drops startup file

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks