Overview

overview

8

Static

static

3

scarey.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    scarey.exe

  • Size

    14.0MB

  • Sample

    250328-xkrnmszvh1

  • MD5

    9ebd9d67dc6cedaeb082dab0c6347fed

  • SHA1

    93511038acfed0fe63a52d23011cd4f0d9bf9b20

  • SHA256

    cf86add2ea9db9c518d62c90d314b487b7d70e921a4eed1ab2c578a51e517dbe

  • SHA512

    17efd4bfc253fed99b6768b3a4e5ecb31d4bd7667c719ff774da46273e1f620d821ef2a72357b9d5d4c1f5320a2f588379271f115b409451863f6b680268eb54

  • SSDEEP

    393216:VcmW8Hfsvwq3Obs2CltXMCHWUjLVg74w/ADF5ILf5kG9Py:tW8Hkvwq3ObRqtXMb8hDw/KLILf5kGdy

Score
8/10
defense_evasionpersistencepyinstallerransomware

Malware Config

Targets

    • Target

      scarey.exe

    • Size

      14.0MB

    • MD5

      9ebd9d67dc6cedaeb082dab0c6347fed

    • SHA1

      93511038acfed0fe63a52d23011cd4f0d9bf9b20

    • SHA256

      cf86add2ea9db9c518d62c90d314b487b7d70e921a4eed1ab2c578a51e517dbe

    • SHA512

      17efd4bfc253fed99b6768b3a4e5ecb31d4bd7667c719ff774da46273e1f620d821ef2a72357b9d5d4c1f5320a2f588379271f115b409451863f6b680268eb54

    • SSDEEP

      393216:VcmW8Hfsvwq3Obs2CltXMCHWUjLVg74w/ADF5ILf5kG9Py:tW8Hkvwq3ObRqtXMb8hDw/KLILf5kGdy

    Score
    8/10
    defense_evasionpersistenceransomware

    • Disables Task Manager via registry modification

      defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks