Overview

overview

8

Static

static

3

x86_64-windows.dll

windows10-2004-x64

1

x86_64-windows.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    tool.jar
  • Size 5.3MB
  • Sample260912-1apyvavgqc
  • SHA256 d16e818aba349f019d012a19349a422d75ed50331582fb058a10aed77b559818
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Targets

    • Target
      x86_64-windows
    • Size 17.0MB
    • SHA256 c6ed5159a2977e28a201c906b475cedaff3532d2afe0dbee5d896733861f8508
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoverypersistenceransomware

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks