Resubmissions
17/03/2025, 08:49
250317-krbvjsvzbz 503/02/2025, 06:35
250203-hcksssvpaq 901/02/2025, 08:21
250201-j874msvmh1 901/02/2025, 05:00
250201-fm6rxasle1 9Analysis
-
max time kernel
35s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
01/02/2025, 05:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20250129-en
2 signatures
150 seconds
General
-
Target
main.exe
-
Size
6KB
-
MD5
9c30c4744d7d505f5f9a24b6b4c9bebb
-
SHA1
a71f4144b6f0a5edffc933e6dd08782cd60e0dc3
-
SHA256
31ff48d218e462b4c1f3de03778c60b99bd1ef0d03a974070abb056138a1754b
-
SHA512
f8755c78f516dc1ef99001569de57c5215b139e5eedfb1547c395a9ba7ad23fa28d0038d4a8d0d23b7b9d6dd91504bd506d443074d55c731b15dfe307b01f5af
-
SSDEEP
96:JgsXR2CODflB3W031gBiSMaxguF0rayQBJZJ8LBFhyW5BBZpsyY0l:RXR2HB3W/Bg5dayAn2ryuBZV
Score
9/10
Malware Config
Signatures
-
Renames multiple (54) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-70482961-775596374-3727440602-1000\Control Panel\Desktop\Wallpaper = "c:\\windows\\web\\wallpaper\\windows\\img0.jpg" main.exe