Overview

overview

8

Static

static

68eddce0ba...09.exe

windows7_x64

8

68eddce0ba...09.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68eddce0bad4515b40581f454e479a42fdd3b89e004fbba162acf339fbe46f09.exe

  • Size

    10KB

  • Sample

    210519-rm35vg4nzn

  • MD5

    c41d36f50230996c2c0f6b245658f930

  • SHA1

    02abda2ec6cc3ea0eb8067c598079d7808df51f3

  • SHA256

    68eddce0bad4515b40581f454e479a42fdd3b89e004fbba162acf339fbe46f09

  • SHA512

    21ba1ee1886552a240d2c2c5e842d96cada8eb518f04f42526e33bb08a939caa3f699b1d3dff80a803d6ce22d4241ffb72772c1c90c1149b5cf22a85b57eaa51

Score
8/10
ransomware

Malware Config

Targets

    • Target

      68eddce0bad4515b40581f454e479a42fdd3b89e004fbba162acf339fbe46f09.exe

    • Size

      10KB

    • MD5

      c41d36f50230996c2c0f6b245658f930

    • SHA1

      02abda2ec6cc3ea0eb8067c598079d7808df51f3

    • SHA256

      68eddce0bad4515b40581f454e479a42fdd3b89e004fbba162acf339fbe46f09

    • SHA512

      21ba1ee1886552a240d2c2c5e842d96cada8eb518f04f42526e33bb08a939caa3f699b1d3dff80a803d6ce22d4241ffb72772c1c90c1149b5cf22a85b57eaa51

    Score
    8/10
    ransomware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks