Overview

overview

10

Static

static

10

c13c39551f...b9.exe

windows7-x64

9

c13c39551f...b9.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c13c39551f595578c429a6f83a6a7603533c48cbb40f8ad7f2e659f141a6c6b9

  • Size

    1.5MB

  • Sample

    240306-a5dk7aeb7v

  • MD5

    d64a654b273d4b29679b47e7713a1f18

  • SHA1

    7ddc9333c23432fe32406c37c5116ebaac6c9732

  • SHA256

    c13c39551f595578c429a6f83a6a7603533c48cbb40f8ad7f2e659f141a6c6b9

  • SHA512

    891a8123499fa772914b91ccfb593c998b1768cb2e18cd2c020b0f9f4e3b2f8c3e51deb87b753adbf1e2b5b574fb8bc317913a2063ecef988d618162a3e51d02

  • SSDEEP

    3072:RR4jdNqTqHLklZpb4RrRDFBI/cMrnTS4y3NkEjbvjuC8xVkxRQjZ3phRrbh6s2+G:fafcEHI/prnm4y3NjTjuC8xOcxphyL

Score
10/10
ransomware

Malware Config

Targets

    • Target

      c13c39551f595578c429a6f83a6a7603533c48cbb40f8ad7f2e659f141a6c6b9

    • Size

      1.5MB

    • MD5

      d64a654b273d4b29679b47e7713a1f18

    • SHA1

      7ddc9333c23432fe32406c37c5116ebaac6c9732

    • SHA256

      c13c39551f595578c429a6f83a6a7603533c48cbb40f8ad7f2e659f141a6c6b9

    • SHA512

      891a8123499fa772914b91ccfb593c998b1768cb2e18cd2c020b0f9f4e3b2f8c3e51deb87b753adbf1e2b5b574fb8bc317913a2063ecef988d618162a3e51d02

    • SSDEEP

      3072:RR4jdNqTqHLklZpb4RrRDFBI/cMrnTS4y3NkEjbvjuC8xVkxRQjZ3phRrbh6s2+G:fafcEHI/prnm4y3NjTjuC8xOcxphyL

    Score
    9/10
    ransomware

    • Detects executables built or packed with MPress PE compressor

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks