Overview

overview

9

Static

static

3

75908d9a52...AS.exe

windows7-x64

9

75908d9a52...AS.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    75908d9a52e8dd5242df70eb209c54f0_NEAS

  • Size

    193KB

  • Sample

    240507-gczfhsee96

  • MD5

    75908d9a52e8dd5242df70eb209c54f0

  • SHA1

    cf59f6798f060028c1433af1cbc8d8cad44b5b12

  • SHA256

    55da92c66d50c2a70f4f5e5b8cf1e67fd8de95d4929835d06efa28974164451f

  • SHA512

    6e11c21e5398cec9b7be54af6b42df15ca5ff7bfddc01f1a94d6011d5a0de26028a293d09f3578c9a4ebe0ac2a10de40021d1254c5af270357d943ea37ae75ab

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZ6gWqKvb0CYJ973e+eKZ6gA:vvbxYX7Z6guvbxYX7Z6gA

Score
9/10
ransomware

Malware Config

Targets

    • Target

      75908d9a52e8dd5242df70eb209c54f0_NEAS

    • Size

      193KB

    • MD5

      75908d9a52e8dd5242df70eb209c54f0

    • SHA1

      cf59f6798f060028c1433af1cbc8d8cad44b5b12

    • SHA256

      55da92c66d50c2a70f4f5e5b8cf1e67fd8de95d4929835d06efa28974164451f

    • SHA512

      6e11c21e5398cec9b7be54af6b42df15ca5ff7bfddc01f1a94d6011d5a0de26028a293d09f3578c9a4ebe0ac2a10de40021d1254c5af270357d943ea37ae75ab

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZ6gWqKvb0CYJ973e+eKZ6gA:vvbxYX7Z6guvbxYX7Z6gA

    Score
    9/10
    ransomware

    • Renames multiple (4043) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks