Overview

overview

9

Static

static

3

6c475cb02b...7f.exe

windows7-x64

9

6c475cb02b...7f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c475cb02b70b7301e807aeef622524f9b476b43debcf68c8bacb1880e6a1c7f.exe

  • Size

    148KB

  • Sample

    240523-brhtesge88

  • MD5

    1aca7a53e652d925969d1ce7e84f3fd0

  • SHA1

    6ec1c60d2070b5ee8dbbbbcca77b4fc3a4a6e2b1

  • SHA256

    6c475cb02b70b7301e807aeef622524f9b476b43debcf68c8bacb1880e6a1c7f

  • SHA512

    96b56bb2e178b95cf2b890627f2f5d159396a8363217d27cf07c73bfd1783cdf7c5a600d5e08483a18d45dffe2f861a340090452242c76ac40e70d5dab9f0333

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65TGA3vZ7Z9pApQESOHepOHe8G+6E65TGA3vg:69WpQEJAb9WpQEJAI

Score
9/10
ransomware

Malware Config

Targets

    • Target

      6c475cb02b70b7301e807aeef622524f9b476b43debcf68c8bacb1880e6a1c7f.exe

    • Size

      148KB

    • MD5

      1aca7a53e652d925969d1ce7e84f3fd0

    • SHA1

      6ec1c60d2070b5ee8dbbbbcca77b4fc3a4a6e2b1

    • SHA256

      6c475cb02b70b7301e807aeef622524f9b476b43debcf68c8bacb1880e6a1c7f

    • SHA512

      96b56bb2e178b95cf2b890627f2f5d159396a8363217d27cf07c73bfd1783cdf7c5a600d5e08483a18d45dffe2f861a340090452242c76ac40e70d5dab9f0333

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65TGA3vZ7Z9pApQESOHepOHe8G+6E65TGA3vg:69WpQEJAb9WpQEJAI

    Score
    9/10
    ransomware

    • Renames multiple (3664) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks