Overview

overview

8

Static

static

3

Module.dll

windows11-21h2-x64

8

Resubmissions

10/08/2024, 07:06

240810-hxh5psvanc

10/08/2024, 06:53

240810-hnsmsatfrf6

10/08/2024, 06:49

240810-hlsvrszcln10

10/08/2024, 06:46

240810-hjzwaszbrn10

10/08/2024, 06:41

240810-hf41vazbkm8

10/08/2024, 06:38

240810-heedsszanp8

10/08/2024, 06:35

240810-hcr7wazajn8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Module.dll
  • Size 1.3MB
  • Sample240810-heedsszanp
  • SHA256 8716c75aff75941711aff8770836f47eb9a254416089ef3571c6fc9a338b3009
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
defense_evasiondiscoveryevasionpersistenceransomware

Malware Config

Targets

    • Target
      Module.dll
    • Size 1.3MB
    • SHA256 8716c75aff75941711aff8770836f47eb9a254416089ef3571c6fc9a338b3009
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    defense_evasiondiscoveryevasionpersistenceransomware

    • Disables Task Manager via registry modification

      evasion

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Modifies WinLogon

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks