Overview

overview

8

Static

static

1

Reindex ALL.cmd

windows10-2004-x64

1

Reindex ALL.cmd

windows11-ltsc_2024-x64

8

Reindex DAP.cmd

windows10-2004-x64

1

Reindex DAP.cmd

windows11-ltsc_2024-x64

1

Reindex DAPA.cmd

windows10-2004-x64

1

Reindex DAPA.cmd

windows11-ltsc_2024-x64

8

Reindex DCS.cmd

windows10-2004-x64

1

Reindex DCS.cmd

windows11-ltsc_2024-x64

1

Reindex DCT.cmd

windows10-2004-x64

1

Reindex DCT.cmd

windows11-ltsc_2024-x64

1

Reindex DPM.cmd

windows10-2004-x64

1

Reindex DPM.cmd

windows11-ltsc_2024-x64

8

Reindex DPT.cmd

windows10-2004-x64

1

Reindex DPT.cmd

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Re-IndexDatabases.zip
  • Size 5KB
  • Sample260702-pe5pbahy71
  • SHA256 d7d2e95e9cb32e9ebd1c2fad6edc67605c9f028d1ca7b9094b1145f3aec270f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Targets

    • Target
      Reindex ALL.cmd
    • Size 429B
    • SHA256 2d4f7b08d8b677435086eadb401a9cf34ed0757e7fccd9f753332b273433b2b8
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      Reindex DAP.cmd
    • Size 75B
    • SHA256 9269a4e1d81342f1bdf2113928eaeaa5057857d9283da45302d74d4437a5441c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      Reindex DAPA.cmd
    • Size 77B
    • SHA256 ad450cc9e91e80dafc92d7639d63c23b068d27bcdcb9ca1809db1d14f464972e
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral5behavioral6
    • Target
      Reindex DCS.cmd
    • Size 75B
    • SHA256 16b5088ebf9d2925aa0e659fe4394f6d48ac84daa1484a922f6a2a3c44bcbef5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      Reindex DCT.cmd
    • Size 75B
    • SHA256 4c893beb5af99cbc81ea8346cead305b78c45abbf7dc252ddf9653a120b7bec2
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      Reindex DPM.cmd
    • Size 75B
    • SHA256 2ace2d850af71211f226495f2bdbfe1ee4d3001333d6451104c94d5efd90cdf3
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistencespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11behavioral12
    • Target
      Reindex DPT.cmd
    • Size 75B
    • SHA256 55534a1bb2acd743ce118d27a17c2261fd08368d62c933ca6342183a3ad6dba8
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks