Overview

overview

9

Static

static

5d40615701...3d.exe

windows7_x64

9

5d40615701...3d.exe

windows10_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d40615701c48a122e44f831e7c8643d07765629a83b15d090587f469c77693d.exe

  • Size

    91KB

  • Sample

    200713-88h4eeyy12

  • MD5

    be60e389a0108b2871dff12dfbb542ac

  • SHA1

    14b4e0bfac64ec0f837f84ab1780ca7ced8d670d

  • SHA256

    5d40615701c48a122e44f831e7c8643d07765629a83b15d090587f469c77693d

  • SHA512

    6051bec441434a80c34ee2752a3da9c3a0307cd1b551aa27a0f7f6f75b9bf64b172745d80f03eea054a03ebd2c493df21fd48d8fa3b706d46a6f7fee0e7c0641

Score
9/10
persistenceransomware

Malware Config

Targets

    • Target

      5d40615701c48a122e44f831e7c8643d07765629a83b15d090587f469c77693d.exe

    • Size

      91KB

    • MD5

      be60e389a0108b2871dff12dfbb542ac

    • SHA1

      14b4e0bfac64ec0f837f84ab1780ca7ced8d670d

    • SHA256

      5d40615701c48a122e44f831e7c8643d07765629a83b15d090587f469c77693d

    • SHA512

      6051bec441434a80c34ee2752a3da9c3a0307cd1b551aa27a0f7f6f75b9bf64b172745d80f03eea054a03ebd2c493df21fd48d8fa3b706d46a6f7fee0e7c0641

    Score
    9/10
    ransomwarepersistence

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Executes dropped EXE

    • Deletes itself

    • Drops startup file

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks