Overview

overview

9

Static

static

3

bd63ed1e5a...a4.exe

windows7-x64

9

bd63ed1e5a...a4.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd63ed1e5a0c05ac7ae5e23a33e81461b37eee277ab226d44a9c6aac78def6a4

  • Size

    180KB

  • Sample

    240525-c9hrtabh3s

  • MD5

    094b468eca24974f73596179b9d286ca

  • SHA1

    3d4f2eee11416219cf7e605eb7493f46b667fa06

  • SHA256

    bd63ed1e5a0c05ac7ae5e23a33e81461b37eee277ab226d44a9c6aac78def6a4

  • SHA512

    365795673881b4e66037900452c851c307bf9f4d39061c223268110e5281d734c9862eb071121dfa03b3a54bf89b9b418d661a2522678506eb2cdabc53429a2b

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXale7WpMaxeb0CYJ97lEYNR73e+eKZ0VXF:RqKvb0CYJ973e+eKZ0VXqKvb0CYJ973o

Score
9/10
ransomware

Malware Config

Targets

    • Target

      bd63ed1e5a0c05ac7ae5e23a33e81461b37eee277ab226d44a9c6aac78def6a4

    • Size

      180KB

    • MD5

      094b468eca24974f73596179b9d286ca

    • SHA1

      3d4f2eee11416219cf7e605eb7493f46b667fa06

    • SHA256

      bd63ed1e5a0c05ac7ae5e23a33e81461b37eee277ab226d44a9c6aac78def6a4

    • SHA512

      365795673881b4e66037900452c851c307bf9f4d39061c223268110e5281d734c9862eb071121dfa03b3a54bf89b9b418d661a2522678506eb2cdabc53429a2b

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXale7WpMaxeb0CYJ97lEYNR73e+eKZ0VXF:RqKvb0CYJ973e+eKZ0VXqKvb0CYJ973o

    Score
    9/10
    ransomware

    • Renames multiple (4547) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks