Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 15:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Release/RansomSim.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release/RansomSim.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Release/RansomSim.exe
- Size 304KB
- Sample260731-sdt3zavflf
- SHA256 f0fb0a41bd4e0796b5b296739f80145c4981983693ddd470661b3441af0d9e38
- MD5 356a0bb5cdc0f299209f618e874815c6
- SHA1 4fb61ed9eec6199db06f4bcee3c5c90890e8bd6e
- SHA512 53695c97ffabd909a7f6ba59b0be1208bebe53532a80c0fa2cd246e5f5e557feba3ba459b7b552cda64a74b435c7ca868566e5431b324feea17db2abb7a0c1bd
- SSDEEP 6144:73n8X10Y6DWn8oJvccfdmxWBTwfka860Oxxcp:Th3oJvvfdHxwf
- TLSH T198648C19F3A510FAEA77817CCD524505EA72BC5647B1E6CF03A04A963F236D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 3 IoCs
description ioc Process File created C:\Users\Admin\Desktop\desktop.ini RansomSim.exe File created C:\Users\Admin\Documents\desktop.ini RansomSim.exe File created C:\Users\Admin\Pictures\desktop.ini RansomSim.exe - Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ransom_note.bmp" RansomSim.exe