Overview

overview

9

Static

static

3

526488b374...25.exe

windows7-x64

9

526488b374...25.exe

windows10-2004-x64

9

Resubmissions

07-09-2023 05:08

230907-fsv8csef95 10

07-09-2023 01:42

230907-b4w7ksde93 9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    526488b37415ae2c692f7da97a18c337b0efd4675fd1ac31b4acaa55c63d2725

  • Size

    76KB

  • Sample

    230907-b4w7ksde93

  • MD5

    74fd302390dc8e8b5f49d2da186e3e8c

  • SHA1

    63b7aedf094158e30980a46da8b8f4eaf88524e5

  • SHA256

    526488b37415ae2c692f7da97a18c337b0efd4675fd1ac31b4acaa55c63d2725

  • SHA512

    0cea34931b747c17e24c9e0947ca5862bdc19ede390e394697abce394047bc6117fdd93773de308cea7c3afbac00b303355e45a1be230f4c2baa7e04b3742b16

  • SSDEEP

    1536:IduCq+ndmWKk9WudptcZhpjrNqZE3Qh3OyeEiw2SB3aiqSuTDjdIa3d:4lq+dTKk9t0LNweQEyeEiDStSJ/jKat

Score
9/10
ransomware

Malware Config

Targets

    • Target

      526488b37415ae2c692f7da97a18c337b0efd4675fd1ac31b4acaa55c63d2725

    • Size

      76KB

    • MD5

      74fd302390dc8e8b5f49d2da186e3e8c

    • SHA1

      63b7aedf094158e30980a46da8b8f4eaf88524e5

    • SHA256

      526488b37415ae2c692f7da97a18c337b0efd4675fd1ac31b4acaa55c63d2725

    • SHA512

      0cea34931b747c17e24c9e0947ca5862bdc19ede390e394697abce394047bc6117fdd93773de308cea7c3afbac00b303355e45a1be230f4c2baa7e04b3742b16

    • SSDEEP

      1536:IduCq+ndmWKk9WudptcZhpjrNqZE3Qh3OyeEiw2SB3aiqSuTDjdIa3d:4lq+dTKk9t0LNweQEyeEiDStSJ/jKat

    Score
    9/10
    ransomware

    • Renames multiple (171) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (187) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks