Overview

overview

9

Static

static

3

3c8b4f6d77...AS.exe

windows7-x64

9

3c8b4f6d77...AS.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c8b4f6d77f17a03134b5ec90f9dccf0_NEAS

  • Size

    157KB

  • Sample

    240507-atk6wsac31

  • MD5

    3c8b4f6d77f17a03134b5ec90f9dccf0

  • SHA1

    ffc6fc5890e44814558e2925523780d13710c4e1

  • SHA256

    0c5c2cabf5e34caf3437041cb14c89907a6f2a8f1bd24d0a93809ee1ac4d5544

  • SHA512

    8cc16c4971ab88207ac9a6a6566c977e7be8dd0c94971b954e7e76071d733bf071225b9637dd17458d5df80b517411139481df8c854b6aa3cc556fc8b1adba86

  • SSDEEP

    3072:6e7WpnhkElEa0NQn0NQ82ee7WpnhkElEa0NQn0NQ82A:RqthQ29qthQ2A

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3c8b4f6d77f17a03134b5ec90f9dccf0_NEAS

    • Size

      157KB

    • MD5

      3c8b4f6d77f17a03134b5ec90f9dccf0

    • SHA1

      ffc6fc5890e44814558e2925523780d13710c4e1

    • SHA256

      0c5c2cabf5e34caf3437041cb14c89907a6f2a8f1bd24d0a93809ee1ac4d5544

    • SHA512

      8cc16c4971ab88207ac9a6a6566c977e7be8dd0c94971b954e7e76071d733bf071225b9637dd17458d5df80b517411139481df8c854b6aa3cc556fc8b1adba86

    • SSDEEP

      3072:6e7WpnhkElEa0NQn0NQ82ee7WpnhkElEa0NQn0NQ82A:RqthQ29qthQ2A

    Score
    9/10
    ransomware

    • Renames multiple (3517) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks