Overview

overview

10

Static

static

10

311edf744c...86.exe

windows7-x64

9

311edf744c...86.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5721e6a09cf912aa329fa275aa665932ada075edc890be4cf98e9adaf1b3701c

  • Size

    92KB

  • Sample

    240531-fg8pbaff5x

  • MD5

    53a4fbd0129968220db604fb9c622dfa

  • SHA1

    1c807085d195e2aae6f11f07e8b4779037393d21

  • SHA256

    5721e6a09cf912aa329fa275aa665932ada075edc890be4cf98e9adaf1b3701c

  • SHA512

    5e1476cc1ea5808efa27d32dc617bc7b7043fed57aba72d705bed706d79d28c2c81c4d925774548c3021018112823088fbc465d4ef39d4472bc978f70f53b4f5

  • SSDEEP

    1536:rdOQKxXqnzP3XjV7Meg1qKuGGoJackUgyLOLbLlUDR6uuh3FKjXFQR66gk7w:rGXynFMegkGhJNQyCL1UDR5wFKjSo6gv

Score
10/10
lockbitransomwarespywarestealer

Malware Config

Targets

    • Target

      311edf744c2e90d7bfc550c893478f43d1d7977694d5dcecf219795f3eb99b86.exe

    • Size

      145KB

    • MD5

      76b23dd72a883d8b1302bb4a514b7967

    • SHA1

      338e19e8a3615c29d8a825ebba66cf55fa0caa2c

    • SHA256

      311edf744c2e90d7bfc550c893478f43d1d7977694d5dcecf219795f3eb99b86

    • SHA512

      39d98f914ec9d8551a894306163bc726f035f9228f3f198de78555988cea5a7b423be8c2a19913c76b996220a81a9b3a257b7f0af67913aa8a50b77321b17735

    • SSDEEP

      1536:azICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDtCYU0GsvgtwjECrozUYj3PeAU2:pqJogYkcSNm9V7DtCCGsg+AmYylQhTT

    Score
    9/10
    ransomwarespywarestealer

    • Renames multiple (351) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks