Overview

overview

10

Static

static

10

sample.exe

windows10-2004-x64

sample.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    sample.bin
  • Size 5.5MB
  • Sample260107-th25tabx7b
  • SHA256 a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
whitelockdefense_evasionransomware

Malware Config

Targets

    • Target
      sample.bin
    • Size 5.5MB
    • SHA256 a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    defense_evasionransomware

    • Renames multiple (10783) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks