494c4a118998ec17abd2675bb86a670711ddd1771faa2b47542f197a3fc5832c

Analysis

user interaction
yes
max time kernel
50s
max time network
54s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 13:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Release/RansomSim.exe
Size 91KB
Sample260731-q699jsvyct
SHA256 494c4a118998ec17abd2675bb86a670711ddd1771faa2b47542f197a3fc5832c
MD5 f5c72175d82902570303327b15e6b864
SHA1 50246c1cc9dac08cabd3d122766f633fe85c9d74
SHA512 ad172ebcb892fd48ce19348b6663d5b99bd3190dc59271a3a41f73ad56759273270d6a9e6ca2674a9e988a8bdb744ffc4446e35b1efb4fd4f6651a384cad7053
SSDEEP 1536:JppLTUgn6OqtH+cG3LPZatdQPJ0kKE26+p/pOMQfD9Uf:fpBUJ+bLPZatdQx+P1pOpCf
TLSH
T139933C26E965016AD26AD6B8CA470901DB72BCC64772B3CF57D09CE70F229D89F3F601
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

ransomware

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File created	C:\Users\Admin\Documents\desktop.ini	RansomSim.exe
File created	C:\Users\Admin\Pictures\desktop.ini	RansomSim.exe
File created	C:\Users\Admin\Desktop\desktop.ini	RansomSim.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ransom_note.bmp"	RansomSim.exe

C:\Users\Admin\AppData\Local\Temp\Release\RansomSim.exe
"C:\Users\Admin\AppData\Local\Temp\Release\RansomSim.exe"
1⤵
- Drops desktop.ini file(s)
- Sets desktop wallpaper using registry
PID:3948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads