Overview

overview

9

Static

static

3

741f135d2a...6c.exe

windows7-x64

9

741f135d2a...6c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    741f135d2abab770a15cfef2d07021bdfb6228519af3668e928e0b6651b6526c

  • Size

    167KB

  • Sample

    240522-bhh3tsff8v

  • MD5

    feba01effd1d5f702f20e3c457453c5a

  • SHA1

    7728fd2e584d0e6f32bc74ca4f7512f0c5de453a

  • SHA256

    741f135d2abab770a15cfef2d07021bdfb6228519af3668e928e0b6651b6526c

  • SHA512

    21ad03db1133c2506f24f00ed7e1ea74c0ecdc6b8b1eab2f75b7ea06b87864bd486774555565f6b4b50639af65648496cdfc02fcd4d2bea95c07bc9f52372968

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBn:PqFF2Ie+e1rqFF2Ie+e1g

Score
9/10
ransomware

Malware Config

Targets

    • Target

      741f135d2abab770a15cfef2d07021bdfb6228519af3668e928e0b6651b6526c

    • Size

      167KB

    • MD5

      feba01effd1d5f702f20e3c457453c5a

    • SHA1

      7728fd2e584d0e6f32bc74ca4f7512f0c5de453a

    • SHA256

      741f135d2abab770a15cfef2d07021bdfb6228519af3668e928e0b6651b6526c

    • SHA512

      21ad03db1133c2506f24f00ed7e1ea74c0ecdc6b8b1eab2f75b7ea06b87864bd486774555565f6b4b50639af65648496cdfc02fcd4d2bea95c07bc9f52372968

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBn:PqFF2Ie+e1rqFF2Ie+e1g

    Score
    9/10
    ransomware

    • Renames multiple (3507) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks