Overview

overview

8

Static

static

1

Beware/bomb.bat

windows11-21h2-x64

1

Beware/bomb.bat

windows11-ltsc_2024-x64

1

Beware/cap...de.vbs

windows11-21h2-x64

3

Beware/cap...de.vbs

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    XDR_ResponseApp_CollectFile_RM-20260619-00013_8216ae9a-c87d-4a28-9c99-c37032d36349_20260619T160619Z.7z
  • Size 1021B
  • Sample260619-vx51pabs2x
  • SHA256 379a220afc6776be04069404dac681b825f371e288fbde4402b0e45bc6232dcc
  • MD5 SHA1 SHA512 TLSH
Score
8/10
adwaredefense_evasionpersistenceransomwarespyware

Malware Config

Targets

    • Target
      Beware/bomb.bat
    • Size 1KB
    • SHA256 97a77202b83844706847df6954fcec44b27e109ca087be97403810326191f185
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    defense_evasion
    behavioral1behavioral2
    • Target
      Beware/capaDaInvisibilidade.vbs
    • Size 79B
    • SHA256 7862c7c96b1378f477bd68302a523d1e64667840bf117db5e926fc3cce038e48
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks