Overview

overview

9

Static

static

7

DESTROY1.exe

windows7-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    DESTROY1.exe
  • Size 62KB
  • Sample240709-vxbrvaxale
  • SHA256 aaa03b0b88082ead8a20567d1c2b129eae1f43be808fecfe60eaeaa2b6fb3afb
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
defense_evasiondiscoveryevasionexecutionexploitimpactransomwareupx

Malware Config

Targets

    • Target
      DESTROY1.exe
    • Size 62KB
    • SHA256 aaa03b0b88082ead8a20567d1c2b129eae1f43be808fecfe60eaeaa2b6fb3afb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    defense_evasiondiscoveryevasionexecutionexploitimpactransomwareupx

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Possible privilege escalation attempt

      exploit

    • Stops running service(s)

      evasionexecution

    • Modifies file permissions

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies boot configuration data using bcdedit

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks