05656a92e36dc71a1dc9474fbf3ca0f9918d64efc3ca42f4eacf988cbaad6c35

Sharing

Copy URL Twitter E-mail

General

Target
ss.bat
Size 373B
Sample260620-qg4epsfs2n
SHA256 05656a92e36dc71a1dc9474fbf3ca0f9918d64efc3ca42f4eacf988cbaad6c35
MD5 0fa312b192c23b6a448cf2adf3dcfba2
SHA1 6a30065b9f4ac6d7e2239f444170c0a3b2fb8221
SHA512 90dbb5fb7df8fdeadc6dff4b6ed0da1b1f5327ce36a58ef4ecf1d53c2cff354b80ec65edca7b252f96f0c3dedcd6cfda05bbd8263085d2ed5d7a636ad22ed81e
TLSH
T1D6E0C0520DCAE2942000E013D814EA4B2C6D8CBC6331712135117DFF107E868821F360
MD5 SHA1 SHA512 TLSH

Score

9^/10

Malware Config

Targets

- Target
  ss.bat
- Size 373B
- SHA256 05656a92e36dc71a1dc9474fbf3ca0f9918d64efc3ca42f4eacf988cbaad6c35
- MD5 0fa312b192c23b6a448cf2adf3dcfba2
- SHA1 6a30065b9f4ac6d7e2239f444170c0a3b2fb8221
- SHA512 90dbb5fb7df8fdeadc6dff4b6ed0da1b1f5327ce36a58ef4ecf1d53c2cff354b80ec65edca7b252f96f0c3dedcd6cfda05bbd8263085d2ed5d7a636ad22ed81e
- TLSH
  T1D6E0C0520DCAE2942000E013D814EA4B2C6D8CBC6331712135117DFF107E868821F360
- MD5 SHA1 SHA512 TLSH
Score

9^/10

defense_evasion evasion execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Tasks

Sharing

General

Malware Config

Targets

Deletes shadow copies

Modifies boot configuration data using bcdedit

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8