Overview

overview

10

Static

static

1

helloworld.py

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    helloworld.py
  • Size 16B
  • Sample260701-j39ehsby6v
  • SHA256 3cacdbc8f4ee587340e0033cd3859b9f08cab4db3742b3e271ce4c941eeb7895
  • MD5 SHA1 SHA512
Score
10/10
credential_accessdiscoverypersistenceransomwarestealer

Malware Config

Targets

    • Target
      helloworld.py
    • Size 16B
    • SHA256 3cacdbc8f4ee587340e0033cd3859b9f08cab4db3742b3e271ce4c941eeb7895
    • MD5 SHA1 SHA512
    Score
    10/10
    credential_accessdiscoverypersistenceransomwarestealer

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks