Overview

overview

7

Static

static

3

From.The.D...RS.iso

windows10-2004-x64

3

From.The.D...RS.iso

windows11-ltsc_2024-x64

3

out.iso

windows10-2004-x64

3

out.iso

windows11-ltsc_2024-x64

3

autorun.inf

windows10-2004-x64

1

autorun.inf

windows11-ltsc_2024-x64

1

darksiders.bin

windows10-2004-x64

3

darksiders.bin

windows11-ltsc_2024-x64

3

setup.exe

windows10-2004-x64

7

setup.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    From.The.Darkness-DARKSiDERS.iso
  • Size 879.8MB
  • Sample260827-ql5tbshp41
  • SHA256 2d86015c8f4cdca422a3a9f1937589181bab5af6bcafc108847f16d420d9a799
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutionransomware

Malware Config

Targets

    • Target
      From.The.Darkness-DARKSiDERS.iso
    • Size 879.8MB
    • SHA256 2d86015c8f4cdca422a3a9f1937589181bab5af6bcafc108847f16d420d9a799
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      out.iso
    • Size 879.8MB
    • SHA256 2d86015c8f4cdca422a3a9f1937589181bab5af6bcafc108847f16d420d9a799
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      autorun.inf
    • Size 66B
    • SHA256 10ff2a4bea301a7446ff2048d40bb874332d6723bbd7bc031b2de2e6c8410c36
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral5behavioral6
    • Target
      darksiders.bin
    • Size 877.2MB
    • SHA256 8814aa6bb0a7d57123d9f77ce27b87ed162aba45991df8d9080248e13fd5692f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      setup.exe
    • Size 1.7MB
    • SHA256 a6367ce3acd5151b83ea0b875c1396bff180979762a80ac8e62663a09c05f2df
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks