General
- Target 9a833961198f67e88cf6be52254fe079.jpg
- Size 72KB
- Sample260825-nv4xaa1flb
- SHA256 0b955b85355eff90085b6caf48b38a9314669053bbef106e8f82e2d9012d2c62
Score
9/10
Malware Config
Targets
-
- Target 9a833961198f67e88cf6be52254fe079.jpg
- Size 72KB
- SHA256 0b955b85355eff90085b6caf48b38a9314669053bbef106e8f82e2d9012d2c62
Score9/10-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Windows Management Instrumentation
1Defense Evasion
Indicator Removal
1File Deletion
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1