Overview

overview

10

Static

static

10

a27891b797...4e.exe

windows7-x64

9

a27891b797...4e.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a27891b79709b884a07e9fc3e8e575c4ef0ddeb3a92a1a6c1009afd98b3f8f4e.exe

  • Size

    342KB

  • Sample

    240129-vl57bagbem

  • MD5

    9739d7c02c58f8370b77f7cc4f94a69c

  • SHA1

    60e761bb336eadc5db63bf519e6597f0a6b63e50

  • SHA256

    11170793038a943b2ef539951a86b7418cb03920fea4e3c371b9c7a462dc762c

  • SHA512

    f2086b6a6e8d6bd1a4defcda072e3419e66008854b8d98de29a054491127f6beed3b7f631522219274ee6d6a5a81428434a9c35dcf9f527af835385f739dff78

  • SSDEEP

    6144:Ix2QdiglMFGfzIBeZO8Wf2cMRuCO/xZqqDLuz+4pQoL27aR9:IAQsgScEyduCJqnuq4z2mR9

Score
10/10
discovery

Malware Config

Targets

    • Target

      a27891b79709b884a07e9fc3e8e575c4ef0ddeb3a92a1a6c1009afd98b3f8f4e.exe

    • Size

      342KB

    • MD5

      9739d7c02c58f8370b77f7cc4f94a69c

    • SHA1

      60e761bb336eadc5db63bf519e6597f0a6b63e50

    • SHA256

      11170793038a943b2ef539951a86b7418cb03920fea4e3c371b9c7a462dc762c

    • SHA512

      f2086b6a6e8d6bd1a4defcda072e3419e66008854b8d98de29a054491127f6beed3b7f631522219274ee6d6a5a81428434a9c35dcf9f527af835385f739dff78

    • SSDEEP

      6144:Ix2QdiglMFGfzIBeZO8Wf2cMRuCO/xZqqDLuz+4pQoL27aR9:IAQsgScEyduCJqnuq4z2mR9

    Score
    9/10
    discovery

    • Detects command variations typically used by ransomware

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks