Overview

overview

9

Static

static

3

0554169cfe...AS.exe

windows7-x64

9

0554169cfe...AS.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0554169cfe47614ade7245740c4eafe0_NEAS

  • Size

    150KB

  • Sample

    240507-j5zcbsba72

  • MD5

    0554169cfe47614ade7245740c4eafe0

  • SHA1

    5dc4744c75970a587cd959148dea9646383374cc

  • SHA256

    83c28f0a9e543ba00cbb00a99e361515b76ab809f420dc1adea599b3d891a4f1

  • SHA512

    f971e7dfee63758b3f2d41d84f0b840492dea5e39646816a92aed9ec0d1638d50e26b1fce8b0c4dce8152a7e6384f594ce8730b7d2e20b79ac918991310aab7a

  • SSDEEP

    1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696R7ZhA7pApvOsOKjC0YSilz:6e7WpXYvnd7e7WpXYvndb

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0554169cfe47614ade7245740c4eafe0_NEAS

    • Size

      150KB

    • MD5

      0554169cfe47614ade7245740c4eafe0

    • SHA1

      5dc4744c75970a587cd959148dea9646383374cc

    • SHA256

      83c28f0a9e543ba00cbb00a99e361515b76ab809f420dc1adea599b3d891a4f1

    • SHA512

      f971e7dfee63758b3f2d41d84f0b840492dea5e39646816a92aed9ec0d1638d50e26b1fce8b0c4dce8152a7e6384f594ce8730b7d2e20b79ac918991310aab7a

    • SSDEEP

      1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696R7ZhA7pApvOsOKjC0YSilz:6e7WpXYvnd7e7WpXYvndb

    Score
    9/10
    ransomware

    • Renames multiple (4290) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks