Overview

overview

9

Static

static

3

33e6fa7204...ba.exe

windows7-x64

9

33e6fa7204...ba.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    33e6fa72045fb2f871fa0e0d73339437e15bb414aef23d2ab298f8f00a4c8eba

  • Size

    141KB

  • Sample

    240430-zer4bshb88

  • MD5

    147f29a0c29a859aff3b08829d67217b

  • SHA1

    ca8a0c191c3956aa916a36ad6d02ca757c36213b

  • SHA256

    33e6fa72045fb2f871fa0e0d73339437e15bb414aef23d2ab298f8f00a4c8eba

  • SHA512

    bbe83f824d4c01eb0240b677fd1345672f03641779a906ded7226e4d981d5478d5ce740a285031ca726e8cb3ac91de133278fe35f5b91f7d79ae7394a4b54c11

  • SSDEEP

    1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc69647ZhA7pApvOsOKjC0YSil9:6e7WpXYvnd4e7WpXYvndF

Score
9/10
ransomware

Malware Config

Targets

    • Target

      33e6fa72045fb2f871fa0e0d73339437e15bb414aef23d2ab298f8f00a4c8eba

    • Size

      141KB

    • MD5

      147f29a0c29a859aff3b08829d67217b

    • SHA1

      ca8a0c191c3956aa916a36ad6d02ca757c36213b

    • SHA256

      33e6fa72045fb2f871fa0e0d73339437e15bb414aef23d2ab298f8f00a4c8eba

    • SHA512

      bbe83f824d4c01eb0240b677fd1345672f03641779a906ded7226e4d981d5478d5ce740a285031ca726e8cb3ac91de133278fe35f5b91f7d79ae7394a4b54c11

    • SSDEEP

      1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc69647ZhA7pApvOsOKjC0YSil9:6e7WpXYvnd4e7WpXYvndF

    Score
    9/10
    ransomware

    • Renames multiple (4743) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks