Overview

overview

10

Static

static

1

WINDOWS (1).reg

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    WINDOWS (1).reg
  • Size 31KB
  • Sample260727-a5nfdstwet
  • SHA256 742115bfb316aa70514f3d81992016b7a4499c6ed5427cf9c4e699d9c847ecd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasionpersistenceprivilege_escalationransomware

Malware Config

Targets

    • Target
      WINDOWS (1).reg
    • Size 31KB
    • SHA256 742115bfb316aa70514f3d81992016b7a4499c6ed5427cf9c4e699d9c847ecd2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionpersistenceprivilege_escalationransomware

    • Modifies visibility of file extensions in Explorer

      defense_evasion

    • Disables use of System Restore points

      defense_evasion

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation

    • Modifies system executable filetype association

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks