Overview

overview

8

Static

static

Random.RANSOM.bin.exe

windows7_x64

8

Random.RANSOM.bin.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Random.RANSOM.bin.zip

  • Size

    44KB

  • Sample

    200726-l46gzw1l6n

  • MD5

    d969bfe5dd58f85be9406f772225b24e

  • SHA1

    2731c5c42a6abf258ec2ee58e1516edaed745408

  • SHA256

    e1520adc5a4b52323127c67437519ad9c1becf7c0a6834ef9e4a4b734345f381

  • SHA512

    b9b2a30b666dc94dbf590bcf750bdc3d1b6f4fabb12c2056b27be9fab2809a031b33bf1c912dc6b6ec2e3a2ded2564772581a5dd4600eb9b2c632c25997ba105

Score
8/10
ransomware

Malware Config

Targets

    • Target

      Random.RANSOM.bin

    • Size

      64KB

    • MD5

      bc234901a4e7dd764b97105a4f6840b9

    • SHA1

      9930e609f8a0b4c999e52799f6267e86b66f7188

    • SHA256

      d2178841fa9e74c19c7d19da870c5beb0dd30cb36b70dd6a2e3488416cab9980

    • SHA512

      9285bbd6e19fd4488a371e54b9bd460207cc29670ada23dc445a352c912edf78536196398bbc49fada73ef2884eb5125dad928ac1a96ba64a46c80904ecf0a4c

    Score
    8/10
    ransomware

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks