Overview

overview

9

Static

static

3

81b385409f...48.exe

windows7-x64

9

81b385409f...48.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81b385409f4bfafea7c7bda1e849d7a4877c312266e628c68bb7f4359a6d2c48

  • Size

    159KB

  • Sample

    240524-3y3kysfe7z

  • MD5

    198d4958f7e192aba3db7c8401dda34c

  • SHA1

    769eb148a8391c0e7e7a11d0c2f42331cea53efe

  • SHA256

    81b385409f4bfafea7c7bda1e849d7a4877c312266e628c68bb7f4359a6d2c48

  • SHA512

    0fb1446967688e7aa0084c925fa464da08d144a8bba45e2577325e8c768961605221861a32264520f45c2aac8ee270e0e146e5a54aaab0e9b35ff4c3c2018b24

  • SSDEEP

    1536:W7ZDpApYbWj2WTWJe+e/qXr7ZDpApYbWj2WTWJe+e/qX4:6DWpaWTWJe+eODWpaWTWJe+eD

Score
9/10
ransomware

Malware Config

Targets

    • Target

      81b385409f4bfafea7c7bda1e849d7a4877c312266e628c68bb7f4359a6d2c48

    • Size

      159KB

    • MD5

      198d4958f7e192aba3db7c8401dda34c

    • SHA1

      769eb148a8391c0e7e7a11d0c2f42331cea53efe

    • SHA256

      81b385409f4bfafea7c7bda1e849d7a4877c312266e628c68bb7f4359a6d2c48

    • SHA512

      0fb1446967688e7aa0084c925fa464da08d144a8bba45e2577325e8c768961605221861a32264520f45c2aac8ee270e0e146e5a54aaab0e9b35ff4c3c2018b24

    • SSDEEP

      1536:W7ZDpApYbWj2WTWJe+e/qXr7ZDpApYbWj2WTWJe+e/qX4:6DWpaWTWJe+eODWpaWTWJe+eD

    Score
    9/10
    ransomware

    • Renames multiple (1055) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks