9422d69461411ce2996d6c7367d6afc4591b0202766f19f5115d8d9579c9fd5c | Triage™

Login
Reports

Overview

overview

8

Static

static

3

ransom.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
ransom.exe
Size 1.2MB
Sample260824-nlsgwsdb68
SHA256 9422d69461411ce2996d6c7367d6afc4591b0202766f19f5115d8d9579c9fd5c
MD5 e96e3af5f6758039901d71009a0611fe
SHA1 b72c47be36ca53e4f409262ac30daac828834142
SHA512 0715276d0dbfc75a4590395884d850fd57918c1a80cc351a2c92583d9dc881642551ceca10a657ff21d38c78a26f81957440393bf480f7ef7e50aed10acb01b1
SSDEEP 12288:FpygsPMgNdiOW+j+upRWb2P/NMyFtrtvIxeHyqASHb6fSnsDsAJAtRjlw:D2MeLd/CyXtvIxeS/sAJAtRjlw
TLSH
T1F245D74221D70CE9DDD26B7C11DBA336A739FD608A3A8B279184F63239335D16D6EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ransom.exe

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

150 seconds

defense_evasion ransomware

Malware Config

Targets

- Target
  ransom.exe
- Size 1.2MB
- SHA256 9422d69461411ce2996d6c7367d6afc4591b0202766f19f5115d8d9579c9fd5c
- MD5 e96e3af5f6758039901d71009a0611fe
- SHA1 b72c47be36ca53e4f409262ac30daac828834142
- SHA512 0715276d0dbfc75a4590395884d850fd57918c1a80cc351a2c92583d9dc881642551ceca10a657ff21d38c78a26f81957440393bf480f7ef7e50aed10acb01b1
- SSDEEP 12288:FpygsPMgNdiOW+j+upRWb2P/NMyFtrtvIxeHyqASHb6fSnsDsAJAtRjlw:D2MeLd/CyXtvIxeS/sAJAtRjlw
- TLSH
  T1F245D74221D70CE9DDD26B7C11DBA336A739FD608A3A8B279184F63239335D16D6EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion ransomware
- Disables Task Manager via registry modification
  defense_evasion
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

defense_evasionransomware

© 2018-2026

Terms | Privacy