Overview

overview

9

Static

static

3

eb58cbfca3...11.exe

windows7-x64

9

eb58cbfca3...11.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb58cbfca307a9d3cfe718d772f7a53079db87bc8936023d6b7adb8cf7206711.exe

  • Size

    3.5MB

  • Sample

    240523-k7w6esbg28

  • MD5

    733a762b6d42c5da00ebfbe66ad74ef9

  • SHA1

    f3c60ea82d5f2bd27c77e5645bbd352f3b0043b9

  • SHA256

    eb58cbfca307a9d3cfe718d772f7a53079db87bc8936023d6b7adb8cf7206711

  • SHA512

    28aa1eaa013c79600218a1d62c18539a6457fb037a32dbf584860177628b617cf97b3a744fca9c92fb64379bc211f2745df811d40d2b944776a4356fb6a95176

  • SSDEEP

    49152:Xf+FqkHBNC5ENOqCFLyihANKcvIAgoEu2v2/Jl/mCkmhTfIeMNq1:vvkHBN4EIRy33goEu2v2xl/XkmhT4s

Score
9/10
defense_evasionexecutionimpactransomware

Malware Config

Targets

    • Target

      eb58cbfca307a9d3cfe718d772f7a53079db87bc8936023d6b7adb8cf7206711.exe

    • Size

      3.5MB

    • MD5

      733a762b6d42c5da00ebfbe66ad74ef9

    • SHA1

      f3c60ea82d5f2bd27c77e5645bbd352f3b0043b9

    • SHA256

      eb58cbfca307a9d3cfe718d772f7a53079db87bc8936023d6b7adb8cf7206711

    • SHA512

      28aa1eaa013c79600218a1d62c18539a6457fb037a32dbf584860177628b617cf97b3a744fca9c92fb64379bc211f2745df811d40d2b944776a4356fb6a95176

    • SSDEEP

      49152:Xf+FqkHBNC5ENOqCFLyihANKcvIAgoEu2v2/Jl/mCkmhTfIeMNq1:vvkHBN4EIRy33goEu2v2xl/XkmhT4s

    Score
    9/10
    defense_evasionexecutionimpactransomware

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Renames multiple (211) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Windows Management Instrumentation

1
T1047

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

2
T1070

File Deletion

2
T1070.004

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Inhibit System Recovery

2
T1490

Resource Development

Reconnaissance

Tasks