General
- Target 035f62b2daab5eafcf35b495dd34bdd81793997f0f4a670f943e149494960615.exe
- Size 1.7MB
- Sample260813-e1kadsbk3s
- SHA256 035f62b2daab5eafcf35b495dd34bdd81793997f0f4a670f943e149494960615
Score
9/10
Malware Config
Targets
-
- Target 035f62b2daab5eafcf35b495dd34bdd81793997f0f4a670f943e149494960615.exe
- Size 1.7MB
- SHA256 035f62b2daab5eafcf35b495dd34bdd81793997f0f4a670f943e149494960615
Score9/10-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Windows Management Instrumentation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1