Overview

overview

9

Static

static

3

eab5675e66...a8.exe

windows7-x64

9

eab5675e66...a8.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    eab5675e6653f1e5eaf52b944862e49d3b9f023467080ca91e278f68f2205ca8

  • Size

    256KB

  • Sample

    240602-epqm2aba67

  • MD5

    4ada38d9ed522e32c78c3f870d4f7037

  • SHA1

    b8c09d0a9fa0e2027ba6526d9a612c4cf59119cf

  • SHA256

    eab5675e6653f1e5eaf52b944862e49d3b9f023467080ca91e278f68f2205ca8

  • SHA512

    7392d7056a6a1302fefed80e5e5110141e5809fe03d640fdc9a701a6108eabce760a4cfc859f6c4181ffec5d6539c4282944e9744260423a23ffc0e07ce9ca8a

  • SSDEEP

    6144:RqlIyFESWu0SWuGSwxwqlIyFESWu0SWuGSwxM:tyTyN

Score
9/10
ransomware

Malware Config

Targets

    • Target

      eab5675e6653f1e5eaf52b944862e49d3b9f023467080ca91e278f68f2205ca8

    • Size

      256KB

    • MD5

      4ada38d9ed522e32c78c3f870d4f7037

    • SHA1

      b8c09d0a9fa0e2027ba6526d9a612c4cf59119cf

    • SHA256

      eab5675e6653f1e5eaf52b944862e49d3b9f023467080ca91e278f68f2205ca8

    • SHA512

      7392d7056a6a1302fefed80e5e5110141e5809fe03d640fdc9a701a6108eabce760a4cfc859f6c4181ffec5d6539c4282944e9744260423a23ffc0e07ce9ca8a

    • SSDEEP

      6144:RqlIyFESWu0SWuGSwxwqlIyFESWu0SWuGSwxM:tyTyN

    Score
    9/10
    ransomware

    • Renames multiple (3592) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks