General
- Target Antivirus-yorik.exe
- Size 9.7MB
- Sample260701-vd8mgact2s
- SHA256 1341868c9c5562a01d8dc67e94258e5bd37456088a9a1cb154a6bfa4f6901690
Score
9/10
Malware Config
Targets
-
- Target Antivirus-yorik.exe
- Size 9.7MB
- SHA256 1341868c9c5562a01d8dc67e94258e5bd37456088a9a1cb154a6bfa4f6901690
Score9/10-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Modifies boot configuration data using bcdedit
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Stops running service(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1System Services
1Service Execution
1Windows Management Instrumentation
1Defense Evasion
Direct Volume Access
1Impair Defenses
2Disable or Modify System Firewall
1Indicator Removal
2File Deletion
2Modify Registry
1