Overview

overview

9

Static

static

3

e0a9109c2c...86.exe

windows7-x64

9

e0a9109c2c...86.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0a9109c2c70072c6691d86bb937564dca35267296def4489d8632ba83aeef86

  • Size

    253KB

  • Sample

    240515-enw4esgd4s

  • MD5

    1f4c4ee423f59d4bf7cd4d1242b3fd56

  • SHA1

    57947c0eeb7598a0909f83a7b34248da079162ad

  • SHA256

    e0a9109c2c70072c6691d86bb937564dca35267296def4489d8632ba83aeef86

  • SHA512

    862e2dcd8d675990b79b06819730eb530ff2fb0370f310fd3b38d6c24e79181acd6d17955b983088b38f574ca9b879b76e7d126da95042a3a7532807256b9196

  • SSDEEP

    3072:6QWpkzlfFpsJOfFpsJ+n6j2QWpkzlfFpsJOfFpsJ+n6jmG+:WowG+

Score
9/10
ransomware

Malware Config

Targets

    • Target

      e0a9109c2c70072c6691d86bb937564dca35267296def4489d8632ba83aeef86

    • Size

      253KB

    • MD5

      1f4c4ee423f59d4bf7cd4d1242b3fd56

    • SHA1

      57947c0eeb7598a0909f83a7b34248da079162ad

    • SHA256

      e0a9109c2c70072c6691d86bb937564dca35267296def4489d8632ba83aeef86

    • SHA512

      862e2dcd8d675990b79b06819730eb530ff2fb0370f310fd3b38d6c24e79181acd6d17955b983088b38f574ca9b879b76e7d126da95042a3a7532807256b9196

    • SSDEEP

      3072:6QWpkzlfFpsJOfFpsJ+n6j2QWpkzlfFpsJOfFpsJ+n6jmG+:WowG+

    Score
    9/10
    ransomware

    • Renames multiple (4859) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks