Overview

overview

10

Static

static

3

បញ្�...��.exe

windows10-2004-x64

10

បញ្�...��.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    42fac2b869af725486a234937f9f64cd7a1e50d8a1a3bd8f87248ea1d5b7f2d6
  • Size 14.0MB
  • Sample261017-e9rqtshz4y
  • SHA256 42fac2b869af725486a234937f9f64cd7a1e50d8a1a3bd8f87248ea1d5b7f2d6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutioninstallerpersistenceprivilege_escalationransomware

Malware Config

Targets

    • Target
      បញ្ជីអ្នកដែលត្រូវបានអញ្ជើញចូលរួមកិច្ចប្រជុំអនុវត្ត.xlsx.exe
    • Size 14.2MB
    • SHA256 c1d8aba9e1bdaf0ad5e2b0290c61a35db9c0008d565c2ae661d11587941611e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutioninstallerpersistenceprivilege_escalationransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Windows Command Shell

1
T1059.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Persistence

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Access Token Manipulation

1
T1134

Parent PID Spoofing

1
T1134.004

Process Injection

1
T1055

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Access Token Manipulation

1
T1134

Parent PID Spoofing

1
T1134.004

File and Directory Permissions Modification

1
T1222

Hide Artifacts

2
T1564

Hidden Files and Directories

2
T1564.001

Process Injection

1
T1055

Credential Access

Discovery

Query Registry

1
T1012

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks