aa34665443216685d3e382f21834d05ba121bc977087b288ae91aaf12791d18a

Analysis

max time kernel
30s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 11:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WinRAR.exe
Size 3.4MB
Sample260805-nf32fawepd
SHA256 aa34665443216685d3e382f21834d05ba121bc977087b288ae91aaf12791d18a
MD5 9d50393360ba1941796f5b32d200e61b
SHA1 54c552d0590c47fb2eb70965c1805920d20342d5
SHA512 e745c0233a5352607cad363484087091d05486dcb47da4945625860c8981cbdfd0feb0f6bbbbc29cb6543c5babf1f3ad00688120091354223c157886c2c706a4
SSDEEP 24576:3n/MaZ0YpDJOCCgWxKLy7rs8LQszHa808luV2J0R3PZZiAYBEhQzse8zmHB4NBdp:3ntDJL9tiwe8VYahbb0N4OB4N793
TLSH
T105F52B342DEA502AB273FF698BE47596EA5FB7A33703585D10A1038A0B23E42DDD153D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ctf_wallpaper.png"	WinRAR.exe

Modifies Control Panel 2 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Control Panel\Desktop\WallpaperStyle = "10"	WinRAR.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Control Panel\Desktop\TileWallpaper = "0"	WinRAR.exe

C:\Users\Admin\AppData\Local\Temp\WinRAR.exe
"C:\Users\Admin\AppData\Local\Temp\WinRAR.exe"
1⤵
- Sets desktop wallpaper using registry
- Modifies Control Panel
PID:3872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads