31ff48d218e462b4c1f3de03778c60b99bd1ef0d03a974070abb056138a1754b

Resubmissions

17/03/2025, 08:49

250317-krbvjsvzbz 5

03/02/2025, 06:35

250203-hcksssvpaq 9

01/02/2025, 08:21

250201-j874msvmh1 9

01/02/2025, 05:00

250201-fm6rxasle1 9

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01/02/2025, 08:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

main.exe
Size

6KB
MD5

9c30c4744d7d505f5f9a24b6b4c9bebb
SHA1

a71f4144b6f0a5edffc933e6dd08782cd60e0dc3
SHA256

31ff48d218e462b4c1f3de03778c60b99bd1ef0d03a974070abb056138a1754b
SHA512

f8755c78f516dc1ef99001569de57c5215b139e5eedfb1547c395a9ba7ad23fa28d0038d4a8d0d23b7b9d6dd91504bd506d443074d55c731b15dfe307b01f5af
SSDEEP

96:JgsXR2CODflB3W031gBiSMaxguF0rayQBJZJ8LBFhyW5BBZpsyY0l:RXR2HB3W/Bg5dayAn2ryuBZV

Score

5^/10

ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Control Panel\Desktop\Wallpaper = "c:\\windows\\web\\wallpaper\\windows\\img0.jpg"	main.exe

C:\Users\Admin\AppData\Local\Temp\main.exe
"C:\Users\Admin\AppData\Local\Temp\main.exe"
1⤵
- Sets desktop wallpaper using registry
PID:2380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact