Overview

overview

9

Static

static

1

9c55207c-9...27.jpg

windows10-ltsc_2021-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    9c55207c-9e81-403b-81ac-824f63489427.jpeg
  • Size 215KB
  • Sample260703-2ry4hsc19r
  • SHA256 08107b8763c40625542976526d10ae1985130396605360581de1e3a304c3d813
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discoveryinstallerpersistenceransomware

Malware Config

Targets

    • Target
      9c55207c-9e81-403b-81ac-824f63489427.jpeg
    • Size 215KB
    • SHA256 08107b8763c40625542976526d10ae1985130396605360581de1e3a304c3d813
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discoveryinstallerpersistenceransomware

    • Contacts a large (6268) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks