Overview

overview

9

Static

static

3

6417ef016f...c3.exe

windows7-x64

9

6417ef016f...c3.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6417ef016f7f3bae244ccf20f38ea90a110ab1f27c2d3449eee98921c39d9fc3

  • Size

    139KB

  • Sample

    240424-2dsdtaah33

  • MD5

    da51bc6aac0e03edace5cfccf251d131

  • SHA1

    c2674a3003440472231b9bbc903ee9c624d9dba7

  • SHA256

    6417ef016f7f3bae244ccf20f38ea90a110ab1f27c2d3449eee98921c39d9fc3

  • SHA512

    85a899841cc68dfe2930dc1d2a58c2173277370a742a6a46ecf23d7eb73a9baa4f25ba5ebc2b12ddde19d657be2ba4a8aff13c54df5412620500d4ff3a243295

  • SSDEEP

    1536:W7ZDpApYbWj2WTWJe+e/qU7ZDpApYbWj2WTWJe+e/qj:6DWpaWTWJe+eDDWpaWTWJe+ew

Score
9/10
ransomware

Malware Config

Targets

    • Target

      6417ef016f7f3bae244ccf20f38ea90a110ab1f27c2d3449eee98921c39d9fc3

    • Size

      139KB

    • MD5

      da51bc6aac0e03edace5cfccf251d131

    • SHA1

      c2674a3003440472231b9bbc903ee9c624d9dba7

    • SHA256

      6417ef016f7f3bae244ccf20f38ea90a110ab1f27c2d3449eee98921c39d9fc3

    • SHA512

      85a899841cc68dfe2930dc1d2a58c2173277370a742a6a46ecf23d7eb73a9baa4f25ba5ebc2b12ddde19d657be2ba4a8aff13c54df5412620500d4ff3a243295

    • SSDEEP

      1536:W7ZDpApYbWj2WTWJe+e/qU7ZDpApYbWj2WTWJe+e/qj:6DWpaWTWJe+eDDWpaWTWJe+ew

    Score
    9/10
    ransomware

    • Renames multiple (5100) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks