Overview

overview

9

Static

static

3

ae4e65f4f5...36.exe

windows7-x64

9

ae4e65f4f5...36.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae4e65f4f59530c4a4ba9f96e27c87aeb4084c6bba1382c34ef024b99e25b636

  • Size

    130KB

  • Sample

    240501-cg7kgaff34

  • MD5

    28edd8bb450e8fdd2f271b1db53bdc50

  • SHA1

    b9bcf276cc54516dc9defa600d983e68ab2df75f

  • SHA256

    ae4e65f4f59530c4a4ba9f96e27c87aeb4084c6bba1382c34ef024b99e25b636

  • SHA512

    8d48d54cbb502cdd3fc2dff678e084448433dcbfc5cbd44fee847b879d3f3d034b105edacce44b76d3a9dc1a94ca1ae0b8736b9cde872358d3cc530351db85c0

  • SSDEEP

    1536:W7ZDpApYbWjIlE77ufL6YRYvBj7ZDpApYbWjIlE77ufL6YRYvB3:6DWpwE7oL6uIDWpwE7oL6uW

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ae4e65f4f59530c4a4ba9f96e27c87aeb4084c6bba1382c34ef024b99e25b636

    • Size

      130KB

    • MD5

      28edd8bb450e8fdd2f271b1db53bdc50

    • SHA1

      b9bcf276cc54516dc9defa600d983e68ab2df75f

    • SHA256

      ae4e65f4f59530c4a4ba9f96e27c87aeb4084c6bba1382c34ef024b99e25b636

    • SHA512

      8d48d54cbb502cdd3fc2dff678e084448433dcbfc5cbd44fee847b879d3f3d034b105edacce44b76d3a9dc1a94ca1ae0b8736b9cde872358d3cc530351db85c0

    • SSDEEP

      1536:W7ZDpApYbWjIlE77ufL6YRYvBj7ZDpApYbWjIlE77ufL6YRYvB3:6DWpwE7oL6uIDWpwE7oL6uW

    Score
    9/10
    ransomware

    • Renames multiple (6014) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks