Overview

overview

9

Static

static

3

fe1a53e361...c9.exe

windows7-x64

9

fe1a53e361...c9.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fe1a53e361c93dd9a8c579a162d2b8c3b27dfe657b836474c1eb8b7f7cbaf0c9

  • Size

    103KB

  • Sample

    240423-gxl1xsea87

  • MD5

    528668fa6fd3f3371d59337cde29d2ea

  • SHA1

    41dd90bf7230bf58ce5c1472c46d95ce55bab5ef

  • SHA256

    fe1a53e361c93dd9a8c579a162d2b8c3b27dfe657b836474c1eb8b7f7cbaf0c9

  • SHA512

    2a051e2cb362f5853cec003a87d4e67b99a6cc35872efe2212c7114e6e0f3168b044b68d201b508f18c313f4bb36b1ccac2f9b7236b46d0aea0cc1fd5e62040e

  • SSDEEP

    768:W7BlpDpARFbhYQkQjjLaManvFNFO/Ms5Ms2F3Fl7BlpDpARFbhYQkQjjLaManvFT:W7ZDpApYbWjCDO67ZDpApYbWjCDO2

Score
9/10
ransomware

Malware Config

Targets

    • Target

      fe1a53e361c93dd9a8c579a162d2b8c3b27dfe657b836474c1eb8b7f7cbaf0c9

    • Size

      103KB

    • MD5

      528668fa6fd3f3371d59337cde29d2ea

    • SHA1

      41dd90bf7230bf58ce5c1472c46d95ce55bab5ef

    • SHA256

      fe1a53e361c93dd9a8c579a162d2b8c3b27dfe657b836474c1eb8b7f7cbaf0c9

    • SHA512

      2a051e2cb362f5853cec003a87d4e67b99a6cc35872efe2212c7114e6e0f3168b044b68d201b508f18c313f4bb36b1ccac2f9b7236b46d0aea0cc1fd5e62040e

    • SSDEEP

      768:W7BlpDpARFbhYQkQjjLaManvFNFO/Ms5Ms2F3Fl7BlpDpARFbhYQkQjjLaManvFT:W7ZDpApYbWjCDO67ZDpApYbWjCDO2

    Score
    9/10
    ransomware

    • Renames multiple (4438) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks