Resubmissions

14/11/2024, 01:55

241114-ccf7qasgrb9

14/11/2024, 00:35

241114-axb3dssbkc9

General

  • Target
    241113-3wefca1h8m_pw_infected.zip
  • Size 18KB
  • Sample241114-axb3dssbkc
  • SHA256 5683ca1c57b180b87add6f7b901f29f53e39d012c13085ee0e5f0a50e8b612a0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      314c52fc3ef69ee952e54c38157ea7451068a5361deb8782a54d03f59f722f65
    • Size 25KB
    • SHA256 314c52fc3ef69ee952e54c38157ea7451068a5361deb8782a54d03f59f722f65
    • MD5 SHA1 SHA512 SSDEEP
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Renames multiple (198) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks