Overview

overview

9

Static

static

3

c503a56e50...0a.exe

windows7-x64

9

c503a56e50...0a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c503a56e50273aca920fac704181fd86dbb618b0673bb88f43d705b28e4ad90a

  • Size

    196KB

  • Sample

    240424-zgjjzahc3s

  • MD5

    350cec1ae844e843d7e964c3637f1809

  • SHA1

    635c95f0986b4f17927e46af9a49d67238a5fc26

  • SHA256

    c503a56e50273aca920fac704181fd86dbb618b0673bb88f43d705b28e4ad90a

  • SHA512

    94fe38b1e8825978d34d5a421f2fc04fd654dcb3dcfa9097151ea81394dca32d84a75292e819a04334cb73a92e51793c2e6c332c5dae0e702b8b93455758d483

  • SSDEEP

    1536:W7ZQpApjIKTie+eqpSpC7ZQpApjIKTie+eqpSp0:6QWpqe+e4QWpqe+eG

Score
9/10
ransomware

Malware Config

Targets

    • Target

      c503a56e50273aca920fac704181fd86dbb618b0673bb88f43d705b28e4ad90a

    • Size

      196KB

    • MD5

      350cec1ae844e843d7e964c3637f1809

    • SHA1

      635c95f0986b4f17927e46af9a49d67238a5fc26

    • SHA256

      c503a56e50273aca920fac704181fd86dbb618b0673bb88f43d705b28e4ad90a

    • SHA512

      94fe38b1e8825978d34d5a421f2fc04fd654dcb3dcfa9097151ea81394dca32d84a75292e819a04334cb73a92e51793c2e6c332c5dae0e702b8b93455758d483

    • SSDEEP

      1536:W7ZQpApjIKTie+eqpSpC7ZQpApjIKTie+eqpSp0:6QWpqe+e4QWpqe+eG

    Score
    9/10
    ransomware

    • Renames multiple (4021) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks