Overview

overview

8

Static

static

3

Last Comma...mer.py

windows10-2004-x64

3

Last Comma...mer.py

windows11-ltsc_2024-x64

3

UUU3021/Mo...ls.dll

windows10-2004-x64

1

UUU3021/Mo...ls.dll

windows11-ltsc_2024-x64

8

UUU3021/ModernWpf.dll

windows10-2004-x64

1

UUU3021/ModernWpf.dll

windows11-ltsc_2024-x64

8

UUU3021/Sy...le.dll

windows10-2004-x64

1

UUU3021/Sy...le.dll

windows11-ltsc_2024-x64

1

UUU3021/To...ns.dll

windows10-2004-x64

1

UUU3021/To...ns.dll

windows11-ltsc_2024-x64

1

UUU3021/Un...er.dll

windows10-2004-x64

1

UUU3021/Un...er.dll

windows11-ltsc_2024-x64

1

UUU3021/UuuClient.exe

windows10-2004-x64

1

UUU3021/UuuClient.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Escape The Backrooms @VaultHaven.zip
  • Size 1.2MB
  • Sample260628-acd19aes5s
  • SHA256 0a1f8905298f0dedfd308d72b42a472a16e6567f8caec78044cd4f8cca92128e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasionpersistenceransomwarespyware

Malware Config

Targets

    • Target
      Last Command Spammer.py
    • Size 1KB
    • SHA256 c311fbccdf02c16b9e406fb5a256d84c984097cf201847b3f6c52d276992a532
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral1behavioral2
    • Target
      UUU3021/ModernWpf.Controls.dll
    • Size 373KB
    • SHA256 3456dad94463e71e1ee300219871172439a49c9cf9ff3f67109aeb755b5c35e1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4
    • Target
      UUU3021/ModernWpf.dll
    • Size 985KB
    • SHA256 9c5f0b80fd4b47c4d6ee4b17558c234fa1bfc3a3dea05260ac9a41a9dbbba9d7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral5behavioral6
    • Target
      UUU3021/System.ValueTuple.dll
    • Size 77KB
    • SHA256 d6fb0dcfee1490a8168117ed1b55758f11db38475417b3668d19f89dcb55cbdd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      UUU3021/ToastNotifications.dll
    • Size 107KB
    • SHA256 ed1297117c8dba2b3880246721af5b74c6ae16d745bea176adbeefc1ee75f2fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      UUU3021/UniversalUE4Unlocker.dll
    • Size 1.1MB
    • SHA256 fbe25869c37522651cd1f0dde264a0c3cb035fd70200b55028501b0986f19519
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      UUU3021/UuuClient.exe
    • Size 446KB
    • SHA256 22431a11497a177fcb5aa362c7a7a7eb21e1c9a27015233f750a24abcbb730cf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    defense_evasion
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks