Overview

overview

9

Static

static

3

781ef1065d...b5.exe

windows7-x64

9

781ef1065d...b5.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    781ef1065d50777b45304f40d9396f02f07cde018be8842d267274c2115b1ab5

  • Size

    158KB

  • Sample

    240522-brszdsga7s

  • MD5

    6d8a3f44c938af163057d0bcc483e39e

  • SHA1

    9b057f8d3335f3f9bf2ba261acb710e0bff1c767

  • SHA256

    781ef1065d50777b45304f40d9396f02f07cde018be8842d267274c2115b1ab5

  • SHA512

    8da72dfaa15a49f1d0bee6d8a014c5eed271c28145490d35f0dbc59b1f959ac0b2885aea0284913cbea928de034fe3a143823203389d073d8fc2baa674eae8d1

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJ/va7Z9pApQESOHepOHe8G+6Ey:69WpQE0zx9WpQE0z/

Score
9/10
ransomware

Malware Config

Targets

    • Target

      781ef1065d50777b45304f40d9396f02f07cde018be8842d267274c2115b1ab5

    • Size

      158KB

    • MD5

      6d8a3f44c938af163057d0bcc483e39e

    • SHA1

      9b057f8d3335f3f9bf2ba261acb710e0bff1c767

    • SHA256

      781ef1065d50777b45304f40d9396f02f07cde018be8842d267274c2115b1ab5

    • SHA512

      8da72dfaa15a49f1d0bee6d8a014c5eed271c28145490d35f0dbc59b1f959ac0b2885aea0284913cbea928de034fe3a143823203389d073d8fc2baa674eae8d1

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJ/va7Z9pApQESOHepOHe8G+6Ey:69WpQE0zx9WpQE0z/

    Score
    9/10
    ransomware

    • Renames multiple (4216) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks