Overview

overview

9

Static

static

3

792e6b8e10...17.exe

windows7-x64

9

792e6b8e10...17.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    792e6b8e10e1f2e08166616c01c0141286d0c7ac7b300283bfd088a3cdabc817

  • Size

    442KB

  • Sample

    240305-12grjsbh83

  • MD5

    5cf4cf8df6f416238897d78a218a9887

  • SHA1

    0b9f94696cf61c38edf057dfee26bc15c5fe696f

  • SHA256

    792e6b8e10e1f2e08166616c01c0141286d0c7ac7b300283bfd088a3cdabc817

  • SHA512

    2dec9276499c2ae907fc15691b3b5775dd222f81e45a9c5adfe0c13c48375b11205e8c8f62e7c6e982b541dd54bf7c561b545bbbdb21db3f9b9a695ff61106be

  • SSDEEP

    6144:RqlIyFESWu0SWuGSfZ+pLQnrSKyqlIyFESWu0SWuGSfZ+pLQnrSK1:tyJZovyJZo+

Score
9/10
ransomware

Malware Config

Targets

    • Target

      792e6b8e10e1f2e08166616c01c0141286d0c7ac7b300283bfd088a3cdabc817

    • Size

      442KB

    • MD5

      5cf4cf8df6f416238897d78a218a9887

    • SHA1

      0b9f94696cf61c38edf057dfee26bc15c5fe696f

    • SHA256

      792e6b8e10e1f2e08166616c01c0141286d0c7ac7b300283bfd088a3cdabc817

    • SHA512

      2dec9276499c2ae907fc15691b3b5775dd222f81e45a9c5adfe0c13c48375b11205e8c8f62e7c6e982b541dd54bf7c561b545bbbdb21db3f9b9a695ff61106be

    • SSDEEP

      6144:RqlIyFESWu0SWuGSfZ+pLQnrSKyqlIyFESWu0SWuGSfZ+pLQnrSK1:tyJZovyJZo+

    Score
    9/10
    ransomware

    • Renames multiple (338) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks