General
- Target bazzarnuker.exe
- Size 178KB
- Sample260628-ac7zbset5p
- SHA256 e291887bbb71c61d72db816c7feab8822507bf1accbc089ce91f56ef72b3aea8
- MD5 0f6cc58930d05645287d1e16872d0a56
- SHA1 efa5cb2cb932d0877cb7c458696e1a26ff936eb0
- SHA512 b0b60e8e868c7b6a4ddc92061e260d30adba8049deb5850905b01d716863862e941e9f8ec69d1ed55bf297624558a2b164894d86c7b4937d4389d1c95bbd955b
- SSDEEP 3072:EXlspKKRWSrcdS9G8KuZZ7USJgBRF0+SRr5XEd7CpN15XrUKAJIJK0Rohh:EXlsIvdGGHuD7FapNwW7G9XoaJFRoh
- TLSH T1C80423D2B356DA43F420F83206A769A1F5E180039D1BEF989A9DA177C0C17E1BF009D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bazzarnuker.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
bazzarnuker.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target bazzarnuker.exe
- Size 178KB
- SHA256 e291887bbb71c61d72db816c7feab8822507bf1accbc089ce91f56ef72b3aea8
- MD5 0f6cc58930d05645287d1e16872d0a56
- SHA1 efa5cb2cb932d0877cb7c458696e1a26ff936eb0
- SHA512 b0b60e8e868c7b6a4ddc92061e260d30adba8049deb5850905b01d716863862e941e9f8ec69d1ed55bf297624558a2b164894d86c7b4937d4389d1c95bbd955b
- SSDEEP 3072:EXlspKKRWSrcdS9G8KuZZ7USJgBRF0+SRr5XEd7CpN15XrUKAJIJK0Rohh:EXlsIvdGGHuD7FapNwW7G9XoaJFRoh
- TLSH T1C80423D2B356DA43F420F83206A769A1F5E180039D1BEF989A9DA177C0C17E1BF009D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Clears Windows event logs
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Disables service(s)
-
Stops running service(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1System Services
2Service Execution
2Windows Management Instrumentation
1