General
- Target [email protected]
- Size 927KB
- Sample261028-3v33bavxbv
- SHA256 cd0e4662829926dc1725c4b9d093be1b5f19b244ff2f1d84b5c4e086b5e64c0b
Score
10/10
Malware Config
Targets
-
- Target [email protected]
- Size 927KB
- SHA256 cd0e4662829926dc1725c4b9d093be1b5f19b244ff2f1d84b5c4e086b5e64c0b
Score10/10Family: Troldesh, Shade, Encoder.858
Troldesh is a ransomware spread by malspam.
Executes dropped EXE
Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
Network activity triggered a Suricata alert
Adds Run key to start application
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1