225c8a3cab0e7b7cf52596a822ecaf75f7826ff89f0e58df190118b988699e8a | Triage

Sharing

General

Target

LAUNCHER(1).exe
Size

26.5MB
Sample

240906-xra98stakk
MD5

2b9574243ce737564c4d808a471b33b8
SHA1

c6a7dbe1bc73ff72c137cdc896c746e77df2ce80
SHA256

225c8a3cab0e7b7cf52596a822ecaf75f7826ff89f0e58df190118b988699e8a
SHA512

5c7aa363baa56d99a79a80f29c5b1d79c5f3ebf359d33e1770d590fa2ad571f32298e4159c02254db3596ab3c82b03dc02a772d41764391d3caba8e738bf60d3
SSDEEP

786432:bHGtKH1jlC42OaZSKNBWkGoCsoM5JX8e:bHGSJ34ZBWkIsoMHX

Score

9^/10

evasion ransomware

Malware Config

Targets

- Target
  
  LAUNCHER(1).exe
- Size
  
  26.5MB
- MD5
  
  2b9574243ce737564c4d808a471b33b8
- SHA1
  
  c6a7dbe1bc73ff72c137cdc896c746e77df2ce80
- SHA256
  
  225c8a3cab0e7b7cf52596a822ecaf75f7826ff89f0e58df190118b988699e8a
- SHA512
  
  5c7aa363baa56d99a79a80f29c5b1d79c5f3ebf359d33e1770d590fa2ad571f32298e4159c02254db3596ab3c82b03dc02a772d41764391d3caba8e738bf60d3
- SSDEEP
  
  786432:bHGtKH1jlC42OaZSKNBWkGoCsoM5JX8e:bHGSJ34ZBWkIsoMHX
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

evasionransomware

behavioral2