51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8

Analysis

max time kernel
112s
max time network
119s
platform
windows7_x64
resource
win7
submitted
18/07/2020, 06:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8.bin.exe
Size

1.1MB
MD5

63310d6d463048c9eb6a79adc6094047
SHA1

fda18b0cc5793aa43e5746cc4feb3f41ef893bc7
SHA256

51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8
SHA512

41de255a9cc1a236818bfb0ec1900900d00dc0b0fb4755720a98800d0a3d8bd80c3f2a6e18ab8def822eeb9c887f1c2a4024345bad3c117626d2c46105270486

Score

5^/10

ransomware

Malware Config

Signatures

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1131729243-447456001-3632642222-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Pictures\\Wallpaper.jpg"	51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8.bin.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1131729243-447456001-3632642222-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\wp.jpg"	51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8.bin.exe

C:\Users\Admin\AppData\Local\Temp\51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8.bin.exe
"C:\Users\Admin\AppData\Local\Temp\51bde9e90c740dd15ca5f289bb893689f90de2ae542b7f140e5334ff7f4768e8.bin.exe"
1⤵
- Sets desktop wallpaper using registry
PID:1124

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads