ae29b9ad9c917b9d37c37496b4f5886b180db5dfa35a17092239618a4a01082e | Triage

Sharing

General

Target

8SNPC_scarey.exe
Size

15.3MB
Sample

250328-vrr7msyxgx
MD5

accce55386a7a512d0b1852efebb21d2
SHA1

c17c3a1a310f1dea30822e2f8cebdc95f30710c2
SHA256

ae29b9ad9c917b9d37c37496b4f5886b180db5dfa35a17092239618a4a01082e
SHA512

be59f6df2cafc554230e04714e4eeee0b0e1d730614dd428a5ea7a516837937e2936adb349c5602940b50d1275e1e860f9b269fd6ca2bf4ffe2032a6a4351135
SSDEEP

393216:AHW8BzAbwq3Obs2CltXMCHWUjZVg74w/ADF5ILf5kzXGP:gW8ybwq3ObRqtXMb8rDw/KLILf5kz2P

Score

9^/10

defense_evasion execution impact pyinstaller ransomware

Malware Config

Targets

- Target
  
  8SNPC_scarey.exe
- Size
  
  15.3MB
- MD5
  
  accce55386a7a512d0b1852efebb21d2
- SHA1
  
  c17c3a1a310f1dea30822e2f8cebdc95f30710c2
- SHA256
  
  ae29b9ad9c917b9d37c37496b4f5886b180db5dfa35a17092239618a4a01082e
- SHA512
  
  be59f6df2cafc554230e04714e4eeee0b0e1d730614dd428a5ea7a516837937e2936adb349c5602940b50d1275e1e860f9b269fd6ca2bf4ffe2032a6a4351135
- SSDEEP
  
  393216:AHW8BzAbwq3Obs2CltXMCHWUjZVg74w/ADF5ILf5kzXGP:gW8ybwq3ObRqtXMb8rDw/KLILf5kz2P
Score

9^/10

defense_evasion execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Disables Task Manager via registry modification
  defense_evasion
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

behavioral2

defense_evasionexecutionimpactransomware