Overview

overview

9

Static

static

3

9c446fe7d5...ef.exe

windows7-x64

9

9c446fe7d5...ef.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c446fe7d5f7a252fa8fa2f1079b96798815cd72d3facc312af5a3bff64b1fef

  • Size

    419KB

  • Sample

    240425-bhjz5acf26

  • MD5

    c76def258a14fd6438648a415a2cd79a

  • SHA1

    72fdfd73db243747ba1f8521f7eed42eea63a1f1

  • SHA256

    9c446fe7d5f7a252fa8fa2f1079b96798815cd72d3facc312af5a3bff64b1fef

  • SHA512

    0c1c4869059365630c9f9b1fe6138a4dc0d5dc12155636c67631a0067018e2e7d32b0109cc83104fe6bac9906b73c23419754ad81c32d02348c8d71423c95b39

  • SSDEEP

    6144:RqlIyFESWu0SWu2shFAC2jnkbOupvuv+qM/qMrqlIyFESWu0SWu2shFAC2jnkbOy:tyosbpankbfcvGyosbpankbfcvK

Score
9/10
ransomware

Malware Config

Targets

    • Target

      9c446fe7d5f7a252fa8fa2f1079b96798815cd72d3facc312af5a3bff64b1fef

    • Size

      419KB

    • MD5

      c76def258a14fd6438648a415a2cd79a

    • SHA1

      72fdfd73db243747ba1f8521f7eed42eea63a1f1

    • SHA256

      9c446fe7d5f7a252fa8fa2f1079b96798815cd72d3facc312af5a3bff64b1fef

    • SHA512

      0c1c4869059365630c9f9b1fe6138a4dc0d5dc12155636c67631a0067018e2e7d32b0109cc83104fe6bac9906b73c23419754ad81c32d02348c8d71423c95b39

    • SSDEEP

      6144:RqlIyFESWu0SWu2shFAC2jnkbOupvuv+qM/qMrqlIyFESWu0SWu2shFAC2jnkbOy:tyosbpankbfcvGyosbpankbfcvK

    Score
    9/10
    ransomware

    • Renames multiple (398) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks