Overview

overview

10

Static

static

10

Ransomware.exe

windows7-x64

10

Ransomware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ransomware.exe

  • Size

    113KB

  • Sample

    241010-c265fa1brq

  • MD5

    9d6c2430dba01a6d51bcae957a6b73b2

  • SHA1

    fb17425c5227ee3bcb975870a2320a3deab7df93

  • SHA256

    f7aef424b5ac320e0833c9cc9be68a491a39eff100fd14f01ebd5ae68db76b46

  • SHA512

    c81750ba6dee49d4612c39a57c9d89f7a494f21ec0a56daede51cfb0d58c5079fef6bdfb5722d432c6c73a2ba83edb4d369624ee235ed5ad9db0dbe4fc01e563

  • SSDEEP

    3072:JdzpRExiXwVehVee336bkoeKyH/lFZji:J1pewqehVe+6bUT/lFZ

Score
10/10
eternitydefense_evasiondiscoveryevasionexecutionimpactransomware

Malware Config

Targets

    • Target

      Ransomware.exe

    • Size

      113KB

    • MD5

      9d6c2430dba01a6d51bcae957a6b73b2

    • SHA1

      fb17425c5227ee3bcb975870a2320a3deab7df93

    • SHA256

      f7aef424b5ac320e0833c9cc9be68a491a39eff100fd14f01ebd5ae68db76b46

    • SHA512

      c81750ba6dee49d4612c39a57c9d89f7a494f21ec0a56daede51cfb0d58c5079fef6bdfb5722d432c6c73a2ba83edb4d369624ee235ed5ad9db0dbe4fc01e563

    • SSDEEP

      3072:JdzpRExiXwVehVee336bkoeKyH/lFZji:J1pewqehVe+6bUT/lFZ

    Score
    10/10
    eternitydefense_evasiondiscoveryevasionexecutionimpactransomware

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Disables Task Manager via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks