Overview

overview

8

Static

static

3

VesperaControl.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    VesperaControl.exe
  • Size 25.4MB
  • Sample260807-mcv1zsfc56
  • SHA256 e156715f0280e4de41c8a1ab605ba83d4667d4c9a4d252aa083a5b0044ef1569
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistenceransomware

Malware Config

Targets

    • Target
      VesperaControl.exe
    • Size 25.4MB
    • SHA256 e156715f0280e4de41c8a1ab605ba83d4667d4c9a4d252aa083a5b0044ef1569
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistenceransomware

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      defense_evasion

    • Disables RegEdit via registry modification

      defense_evasion

    • Disables Task Manager via registry modification

      defense_evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks