f5186f9643e3eac02a888b65ae9b1e354add39f717dfc8843c57163fd81d0c05

General

Target
1234.7z
Size 185KB
Sample250503-ff72dsem5t
SHA256 f5186f9643e3eac02a888b65ae9b1e354add39f717dfc8843c57163fd81d0c05
MD5 4d9974fa919d5de33b8d1c4540c6c4c8
SHA1 63af0e0b4ccef48b8cd26bba08e6a166d40102d0
SHA512 af308f7ab24b27d4ea12ca4f45a74f33b62acbf4f66043a7196cff253d9957b2c9e4b33a0d8a9250c6b21f1fa88c741cea8d2fe2a70ac6788a426b6a6bb46fd9
SSDEEP 3072:Hn/x2QbM8rAmLdit+qBCW1Dm9oATwrpF6t4tKg+yT1MgUxbDMVo7VGByC:H/xHA8rAFCW1DAoxM4tKg+IubDv6yC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

ransomware

Malware Config

Targets

- Target
  1234.7z
- Size 185KB
- SHA256 f5186f9643e3eac02a888b65ae9b1e354add39f717dfc8843c57163fd81d0c05
- MD5 4d9974fa919d5de33b8d1c4540c6c4c8
- SHA1 63af0e0b4ccef48b8cd26bba08e6a166d40102d0
- SHA512 af308f7ab24b27d4ea12ca4f45a74f33b62acbf4f66043a7196cff253d9957b2c9e4b33a0d8a9250c6b21f1fa88c741cea8d2fe2a70ac6788a426b6a6bb46fd9
- SSDEEP 3072:Hn/x2QbM8rAmLdit+qBCW1Dm9oATwrpF6t4tKg+yT1MgUxbDMVo7VGByC:H/xHA8rAFCW1DAoxM4tKg+IubDv6yC
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
behavioral1
- Target
  1234/calculator.exe
- Size 571KB
- SHA256 d4fa38fa69e8ca76a9d5fbbb73a9d7e35643ac8f9b5c51777567a290b4835453
- MD5 2a158f4387208ec7fc6a850f5bbb8786
- SHA1 deba7f1a30aa9ddda1d7e405386485e25e4976f6
- SHA512 71d5e944c06f700b3eef3a4371d0148c21503e1b6c7d25256f289e00ad8c61d9ba537e603086b07937c9ff7a24ea36e2f7ea246cef85922773ddeb5e6a64bfaa
- SSDEEP 12288:ij6rKeR+d7t5ZHywk3Ta77Hp0fWAUmB0ms7yrSvYFEVuo3A:0Besd7tuJSvYFEVuo3A
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10

ransomware
- Sets desktop wallpaper using registry
  ransomware
behavioral2
- Target
  1234/myfunny.c
- Size 5KB
- SHA256 5bcd80c1acfe2ab24191bdf35f8a8be01a5da7f45e4c6da373af51a8db5c25b0
- MD5 4e6768918452e6179d1baf76d83d9eb2
- SHA1 5f234fa47e13d97e8a825b4be979e3c4f075bffd
- SHA512 08f8c3625384cde8b6806922d665583a34ae3318ec0a9bcfa0767f7a531d974aef2cbe0c30e22ec7fa7a7a10860c121cce81a53017315f5bdf7d19c53ed37d12
- SSDEEP 96:6DrniQwPMFo74DtoQAdVWFnQnNihv++pNEf4yxKMYQ/t8D36A9fdZ/vV1PkM0gGl:uiQwPMo74DiQAdVwnQnNi0oCAyoMYQ/p
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3
- Target
  1234/myfunny.dll
- Size 273KB
- SHA256 9baf913ffa012157a99ba0982afb2e4c1f599479128080217df33e4ef33446f9
- MD5 1ce00827de554e2194db71021ffc97d4
- SHA1 8b3ccd457b471a38a01684f8e309f8f88bf2c56e
- SHA512 6929ab057f5e08334a249cc9816600581accf4198dbe803445debf7eb13b899c09983eadd489029ef7bc85eb21b23e62464c6431462232de1f9e417e5416339c
- SSDEEP 3072:mQyTWiOIsmU28ULcWSnVaOEtQyJen3nyLmYVkiL8JAusr91:eTJOoQWSnVaNLmYjLP91
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10

ransomware
- Sets desktop wallpaper using registry
  ransomware
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

1

T1491

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Sets desktop wallpaper using registry

Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4