Overview

overview

8

Static

static

9f3c1668ee...37.exe

windows7_x64

8

9f3c1668ee...37.exe

windows10-2004_x64

8

Resubmissions

14/03/2022, 17:54

220314-wgxvtaafb4 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37.zip

  • Size

    238KB

  • Sample

    220314-wgxvtaafb4

  • MD5

    6989541abb96371dd6b6b52ff743e087

  • SHA1

    0b65120ceb6bff231a3beadee9f4a8dfe66553ff

  • SHA256

    778d299fe06212fbad37d912ddf1157085fe6629c18cdc73567dd717d91b890f

  • SHA512

    284b52f24e515b9a54716bfb7c32d89d772deb9985e7cd913e56ca08023134d582e1718d44b156c5a94fe18e64ddfca87bbca553a25795c6bc736a5124ada7e7

Score
8/10
ransomware

Malware Config

Targets

    • Target

      9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37.exe

    • Size

      490KB

    • MD5

      3b3a50b242841e1789a919b1291051f1

    • SHA1

      7b74a50352bb16ba94201c8a9e35b3c1d8a9dc8c

    • SHA256

      9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37

    • SHA512

      ee56efff743ace5d667536acc2134d1f8add17cf8c19787e37a0b86d1a12cf975a26e8920cdf5b5941b698fc0fc5d1450852f80afef95de0e84f254433e39e77

    Score
    8/10
    ransomware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks