0ea7353e164cad90a5ab40d2863357f05db80c492fd526a2077f7b29dca2d039 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

ransom.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
ransom.exe
Size 1.1MB
Sample260824-m1ry8sstbv
SHA256 0ea7353e164cad90a5ab40d2863357f05db80c492fd526a2077f7b29dca2d039
MD5 cca8c75e610af7f7e8cfd69814e6dbb8
SHA1 b326cc3170b89f3a0c1c53bbd939f441c2b5b707
SHA512 cab833e544d5ee4942793f303f9637fd01d54d201b4898414c9383c53511ecfa005c5fda55d13970097c1b3b321a95e9132178e7235c6a7e8c01f48cd7f86524
SSDEEP 12288:oTfzfoSwjslwlXjc13pwx6q6xjmrbYp8BxQsWaZSHb6fSnsDsAJlMRjow:s7bwjJZwjm/YSwsWalsAJlMRjow
TLSH
T1B545D84226D70CE9DDD26B7811DBA33AA735FD708A3A8B2B9184F53239335C16D5EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ransom.exe

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

150 seconds

defense_evasion ransomware

Malware Config

Targets

- Target
  ransom.exe
- Size 1.1MB
- SHA256 0ea7353e164cad90a5ab40d2863357f05db80c492fd526a2077f7b29dca2d039
- MD5 cca8c75e610af7f7e8cfd69814e6dbb8
- SHA1 b326cc3170b89f3a0c1c53bbd939f441c2b5b707
- SHA512 cab833e544d5ee4942793f303f9637fd01d54d201b4898414c9383c53511ecfa005c5fda55d13970097c1b3b321a95e9132178e7235c6a7e8c01f48cd7f86524
- SSDEEP 12288:oTfzfoSwjslwlXjc13pwx6q6xjmrbYp8BxQsWaZSHb6fSnsDsAJlMRjow:s7bwjJZwjm/YSwsWalsAJlMRjow
- TLSH
  T1B545D84226D70CE9DDD26B7811DBA33AA735FD708A3A8B2B9184F53239335C16D5EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion ransomware
- Disables Task Manager via registry modification
  defense_evasion
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

defense_evasionransomware

© 2018-2026

Terms | Privacy