Overview

overview

9

Static

static

3

1a82b66a50...8b.exe

windows7-x64

9

1a82b66a50...8b.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a82b66a50695fc39dab4634bc64078ef8f3fc0e1473b261f6c604f64a27168b

  • Size

    389KB

  • Sample

    240410-xvz3rsha35

  • MD5

    44ffdb6b7df3f76ff97fd6b87f5a5116

  • SHA1

    926fde2233ccea81ed87994016337941b53e9b39

  • SHA256

    1a82b66a50695fc39dab4634bc64078ef8f3fc0e1473b261f6c604f64a27168b

  • SHA512

    f72012fed9e7d6c7ebbd95566c7af57e31cbc28f9fc72995d678b6b525ce90e9530e445fec86276fdbac0ba44aa38271848c0eac8a10f0b121341b2e7f21778d

  • SSDEEP

    6144:dce+ep5lqo52kDzMYDJSi7+Ni2ER9Vh98+1PrEVhkQf0huIDaLOjmP:tMqzBDJkk2ERvT8MPAf/O6P

Score
9/10
ransomware

Malware Config

Targets

    • Target

      1a82b66a50695fc39dab4634bc64078ef8f3fc0e1473b261f6c604f64a27168b

    • Size

      389KB

    • MD5

      44ffdb6b7df3f76ff97fd6b87f5a5116

    • SHA1

      926fde2233ccea81ed87994016337941b53e9b39

    • SHA256

      1a82b66a50695fc39dab4634bc64078ef8f3fc0e1473b261f6c604f64a27168b

    • SHA512

      f72012fed9e7d6c7ebbd95566c7af57e31cbc28f9fc72995d678b6b525ce90e9530e445fec86276fdbac0ba44aa38271848c0eac8a10f0b121341b2e7f21778d

    • SSDEEP

      6144:dce+ep5lqo52kDzMYDJSi7+Ni2ER9Vh98+1PrEVhkQf0huIDaLOjmP:tMqzBDJkk2ERvT8MPAf/O6P

    Score
    9/10
    ransomware

    • Renames multiple (3733) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks