Overview

overview

9

Static

static

3

5cb1808d29...1e.exe

windows7-x64

9

5cb1808d29...1e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cb1808d29d1bb9570711f91f67cc7c6928b3a05263554e2669bea498622b51e

  • Size

    152KB

  • Sample

    240429-1wsxmace56

  • MD5

    844d9bd8ea5f0dfb120d11475779ad3d

  • SHA1

    67fcdd72cc76fac5fd4ed79fe03d7e5c880ecdd1

  • SHA256

    5cb1808d29d1bb9570711f91f67cc7c6928b3a05263554e2669bea498622b51e

  • SHA512

    db43e2b29c2c58af9deeea2bb862505cd093569503921fd0fb2556cc1e7977d7d99178e56fec62ce8e010746f7e01f86bc7b432ec6c430a46c4d787c9b9cdc9c

  • SSDEEP

    3072:6e7WpnhkElEa0NQn0NQoe7WpnhkElEa0NQn0NQX:RqthHqth7

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5cb1808d29d1bb9570711f91f67cc7c6928b3a05263554e2669bea498622b51e

    • Size

      152KB

    • MD5

      844d9bd8ea5f0dfb120d11475779ad3d

    • SHA1

      67fcdd72cc76fac5fd4ed79fe03d7e5c880ecdd1

    • SHA256

      5cb1808d29d1bb9570711f91f67cc7c6928b3a05263554e2669bea498622b51e

    • SHA512

      db43e2b29c2c58af9deeea2bb862505cd093569503921fd0fb2556cc1e7977d7d99178e56fec62ce8e010746f7e01f86bc7b432ec6c430a46c4d787c9b9cdc9c

    • SSDEEP

      3072:6e7WpnhkElEa0NQn0NQoe7WpnhkElEa0NQn0NQX:RqthHqth7

    Score
    9/10
    ransomware

    • Renames multiple (4095) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks