Overview

overview

10

Static

static

10

e878a44d1c...d0.exe

windows7-x64

9

e878a44d1c...d0.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e878a44d1cdacf222fd214e505a55496f7bd739a384c63b693277e8e9af2b4d0.exe

  • Size

    342KB

  • Sample

    240128-vcjxqafefj

  • MD5

    dedd3f3e5d390a51e0f0cbf356ff9006

  • SHA1

    f351a8b47b71c05e96de72da460960e0c412fba1

  • SHA256

    6b048abb6c234d2d30a4f03cf7bbe94f9af6fff73b6cd5049d5cdcc61175f97b

  • SHA512

    0b83d1d96a6721160240c641b76ad98de75b5427c4db9f30bd04c7ccbf7da29088a991a3a4ecc6fc0debfe5cb5c0d40686cb5a5e712e11c327b8cc966d92f0c9

  • SSDEEP

    6144:Nx2QdiglMFGfzIBeZO8Wf2cMR5CO/xZqqDLuz+4pQoL27aR9:NAQsgScEyd5CJqnuq4z2mR9

Score
10/10
discovery

Malware Config

Targets

    • Target

      e878a44d1cdacf222fd214e505a55496f7bd739a384c63b693277e8e9af2b4d0.exe

    • Size

      342KB

    • MD5

      dedd3f3e5d390a51e0f0cbf356ff9006

    • SHA1

      f351a8b47b71c05e96de72da460960e0c412fba1

    • SHA256

      6b048abb6c234d2d30a4f03cf7bbe94f9af6fff73b6cd5049d5cdcc61175f97b

    • SHA512

      0b83d1d96a6721160240c641b76ad98de75b5427c4db9f30bd04c7ccbf7da29088a991a3a4ecc6fc0debfe5cb5c0d40686cb5a5e712e11c327b8cc966d92f0c9

    • SSDEEP

      6144:Nx2QdiglMFGfzIBeZO8Wf2cMR5CO/xZqqDLuz+4pQoL27aR9:NAQsgScEyd5CJqnuq4z2mR9

    Score
    9/10
    discovery

    • Detects command variations typically used by ransomware

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks