General
- Target dwm97.cmd
- Size 376B
- Sample260529-1trlsaft6x
- SHA256 330def024c7c03c35fdab78b6570fc938a77ddeddee5c3d5253729e764437dbd
Score
10/10
Malware Config
Targets
-
- Target dwm97.cmd
- Size 376B
- SHA256 330def024c7c03c35fdab78b6570fc938a77ddeddee5c3d5253729e764437dbd
Score10/10-
Modifies visibility of file extensions in Explorer
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1