Overview

overview

8

Static

static

3

temp/esen.bat

windows10-ltsc_2021-x64

3

temp/print.dll

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    temp.zip
  • Size 678KB
  • Sample260908-nnzzrayhjf
  • SHA256 5f1effe80f6e613866bf48f46150c79bc4ecb7447592087cd568319aee742d6d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecutionpersistenceransomware

Malware Config

Targets

    • Target
      temp/esen.bat
    • Size 263B
    • SHA256 a02c010f2b4ce81f5abb511eea1646a65500d436a42450d58f2e2ef88188a758
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    executionransomware
    behavioral1
    • Target
      temp/print.dll
    • Size 227KB
    • SHA256 8e0bc42206d65270a34851ebb03806294e3b5fe62d793225a8c95e6ca6b4ee62
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionpersistence

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    behavioral2

MITRE ATT&CK Enterprise v16

Tasks