Overview

overview

10

Static

static

3

믨᪠ ...2).scr

windows7-x64

10

믨᪠ ...2).scr

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41e1c5e9b470fa68fe11bf3416538249_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241013-y3xhaawfmf

  • MD5

    41e1c5e9b470fa68fe11bf3416538249

  • SHA1

    cb12bec4c61b4acfc528751a5756a1a4d07092c0

  • SHA256

    e8baf47831b560a10bd035fa480267f376550fc933671ca6f628929d2522b52e

  • SHA512

    82d52546eb3b23ea3f4795899bf838a754bacc0cbead755e76f2599502d79f61eea0d4c1d6c42e1a2e6b58e73a1ac9f7394a585a9811024bbdc94487f61f9a06

  • SSDEEP

    24576:c6GP8SpfWKt/Tu2dbPSUEBpjkB34cqucokfJU:noZJTu2dbPnEBpjoBNcokfS

Score
10/10
troldeshdiscoverypersistenceransomwarespywarestealertrojanupx

Malware Config

Targets

    • Target

      믨᪠ 08.10-063798300(2).scr

    • Size

      1.4MB

    • MD5

      0afa605ace19d72c94bf3823b854c50a

    • SHA1

      49fef4eacf0a363e003dae1a6c3145bbea60cd52

    • SHA256

      36eea12f5b2fcbe04db2eea464c2b83ff878b26e6b8442f29404e9dfb9dc37ff

    • SHA512

      7b64e4fb872e6e3098fc4123cd54e5f70b9103f68d5084e7cb7e1352bf41a4b79bec001f1c9ae14bb280af438777594f640207ae17c9490396d88e39a42697c8

    • SSDEEP

      24576:JEozEIncUZrOAJhGTVE2SKRGktfn+6dFP+WmBBn8b34aOuKM8f1dAx5:3zEiAAJyEt4vn+6dFPPmBBnkXZKM8fQ5

    Score
    10/10
    troldeshdiscoverypersistenceransomwarespywarestealertrojanupx

    • Troldesh, Shade, Encoder.858

      Troldesh is a ransomware spread by malspam.

      ransomwaretrojantroldesh

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks