Overview

overview

6

Static

static

3

not-virus_...me.exe

windows10-2004-x64

6

not-virus_...me.exe

windows11-ltsc_2024-x64

6

not-virus_...rd.exe

windows10-2004-x64

3

not-virus_...rd.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    (NSFW) Cierrame and Weird.zip
  • Size 180KB
  • Sample260628-2nk3gsfx8w
  • SHA256 3872384d6c006f058014456a7ae263a754b911bf035bb467e183f07d714a1b8f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoverypersistence

Malware Config

Targets

    • Target
      not-virus_BadJoke.Win32.Cierrame.exe
    • Size 196KB
    • SHA256 241870d6a3df85c79a632ef255781d57cec6115e8ea99638432893285ad6ccd5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      not-virus_BadJoke.Win32.Weird.exe
    • Size 61KB
    • SHA256 d912480b1d72f3c1615cecc9e7250f2b8a401045633608500c981caef8bd0397
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks