Overview

overview

8

Static

static

3

Nightmare.exe

windows11-ltsc_2024-x64

1

src/app_54.dll

windows11-ltsc_2024-x64

1

src/app_9.dll

windows11-ltsc_2024-x64

8

src/backup_72.dll

windows11-ltsc_2024-x64

1

src/base_56.dll

windows11-ltsc_2024-x64

8

src/build_75.dll

windows11-ltsc_2024-x64

1

src/core_46.dll

windows11-ltsc_2024-x64

1

src/info_17.dll

windows11-ltsc_2024-x64

8

src/lib_111.dll

windows11-ltsc_2024-x64

1

src/module_48.dll

windows11-ltsc_2024-x64

8

src/node_8.dll

windows11-ltsc_2024-x64

1

src/proj_66.dll

windows11-ltsc_2024-x64

1

src/stats_28.dll

windows11-ltsc_2024-x64

1

src/struct_79.dll

windows11-ltsc_2024-x64

1

src/temp_14.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Nightmare.zip
  • Size 127.1MB
  • Sample260906-1g9lts1thy
  • SHA256 672d1e943787f0b011a407122c7d798ceea0c3051071421a68251c22168bc3e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Targets

    • Target
      Nightmare.exe
    • Size 23.6MB
    • SHA256 fc1239552e4061d2c1c3918d46521f9eefe472f58358b4379f6b91522ed4cbf3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      src/app_54.dll
    • Size 673KB
    • SHA256 a44e9bf0cc4b4b3f40c8fcc3a350183cc8a520f2a001c03a4513484bb6be7531
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2
    • Target
      src/app_9.dll
    • Size 539KB
    • SHA256 682c7eda2f06c09705c6ec185190298845ddc937b9c9a7a2da08b7a25c7c6652
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3
    • Target
      src/backup_72.dll
    • Size 907KB
    • SHA256 7cc44cec2aa7dbdb6669df4e3ef21c8725fc22ab358cb98889ad9564d7b6ecff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4
    • Target
      src/base_56.dll
    • Size 937KB
    • SHA256 150a13fd72bba83b4713b5d44e590d2be3db8d2fecefe812b45289652a1a5953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral5
    • Target
      src/build_75.dll
    • Size 675KB
    • SHA256 0ba0c4bd012f1daab1c604f8b903d637c969127ca53aabcca784836a93218eb0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral6
    • Target
      src/core_46.dll
    • Size 564KB
    • SHA256 01105063d2e326e9e1dba54f1cf6548a36cc8e3d5b05d45a7e317507ce12f7fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7
    • Target
      src/info_17.dll
    • Size 793KB
    • SHA256 b9364429473bc08e28dbe561003d72bbda61b371889372501dd55b2ac6b6395a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral8
    • Target
      src/lib_111.dll
    • Size 645KB
    • SHA256 8250f2c6f4221524dced05fd1c988465335ed1b32bfcc712f443b673847b6209
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9
    • Target
      src/module_48.dll
    • Size 556KB
    • SHA256 5a24bc94da497cdc34af9c12420a4beb9806e37834309cd9633f2a188f47da27
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral10
    • Target
      src/node_8.dll
    • Size 656KB
    • SHA256 132c4991bcde8ee757cf744ad9fd30a9c0b07fa08ac5ddb758ea3b4cc6799b06
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11
    • Target
      src/proj_66.dll
    • Size 900KB
    • SHA256 40ceb1a6ef3fbb7d42aceee38d4f83ed9265cabbf52ce319c968de67ea2dc10b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral12
    • Target
      src/stats_28.dll
    • Size 979KB
    • SHA256 98f9fc0af3e8b349c4a6088556c2965939c9d6c065bf2b55d2457c8ef84f4722
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13
    • Target
      src/struct_79.dll
    • Size 900KB
    • SHA256 ce35f15e0a4a6587f75576065a22db0e482a084727032f937bb35d92d5173ceb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14
    • Target
      src/temp_14.dll
    • Size 958KB
    • SHA256 42f37a76f3528a2c54d409fda1223299af4f8332aca518c0ad211b1a24d6d351
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15

MITRE ATT&CK Enterprise v16

Tasks