Overview

overview

9

Static

static

3

ba01527756...25.exe

windows7-x64

9

ba01527756...25.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba01527756e73dd25677be44670e1bd44cfbb8409191ae03e764ba8fea352925

  • Size

    266KB

  • Sample

    240515-csnlqscf4y

  • MD5

    0863afccff8f756558b218e617a0f536

  • SHA1

    4aa2b648c62a6c17ec0bf32ebb71f16926b2404a

  • SHA256

    ba01527756e73dd25677be44670e1bd44cfbb8409191ae03e764ba8fea352925

  • SHA512

    e28c8073cb63374841e9f5dd39eb79ea5374f949aa81686c5be034c56f383d066894d7301be77f134bdd90bb7520c8a469b53e512bb0aca181e7aedadaecc41a

  • SSDEEP

    768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXB85c5cfYfi7BlpQpARb:/7ZQpApUsKiX26S7ZQpApUsKiX26X

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ba01527756e73dd25677be44670e1bd44cfbb8409191ae03e764ba8fea352925

    • Size

      266KB

    • MD5

      0863afccff8f756558b218e617a0f536

    • SHA1

      4aa2b648c62a6c17ec0bf32ebb71f16926b2404a

    • SHA256

      ba01527756e73dd25677be44670e1bd44cfbb8409191ae03e764ba8fea352925

    • SHA512

      e28c8073cb63374841e9f5dd39eb79ea5374f949aa81686c5be034c56f383d066894d7301be77f134bdd90bb7520c8a469b53e512bb0aca181e7aedadaecc41a

    • SSDEEP

      768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXB85c5cfYfi7BlpQpARb:/7ZQpApUsKiX26S7ZQpApUsKiX26X

    Score
    9/10
    ransomware

    • Renames multiple (3468) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks