Overview

overview

9

Static

static

3

c86fd60671...7d.exe

windows7-x64

9

c86fd60671...7d.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c86fd60671c3e7b9b3c592a273e4a31ea557ff247350bc0bc857012f22cdff7d

  • Size

    96KB

  • Sample

    240603-d72btahh8t

  • MD5

    2be1fbb94a779171e75b136abba53e5d

  • SHA1

    2949cf8f14bdc307809dfb7fbd8444e8b4fafde3

  • SHA256

    c86fd60671c3e7b9b3c592a273e4a31ea557ff247350bc0bc857012f22cdff7d

  • SHA512

    c763bc63c24f1c10960fc172836cfae08d6c3957eea477074f37d548e33835ebe3a0e8e697e4fb3cd71c999d3efaa88c990a9d958124c21f1b6f13d8ae61ed1c

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJdQWpze+eJfFpsJOfFpsJe2k:Lpe+ecpe+e/2k

Score
9/10
ransomware

Malware Config

Targets

    • Target

      c86fd60671c3e7b9b3c592a273e4a31ea557ff247350bc0bc857012f22cdff7d

    • Size

      96KB

    • MD5

      2be1fbb94a779171e75b136abba53e5d

    • SHA1

      2949cf8f14bdc307809dfb7fbd8444e8b4fafde3

    • SHA256

      c86fd60671c3e7b9b3c592a273e4a31ea557ff247350bc0bc857012f22cdff7d

    • SHA512

      c763bc63c24f1c10960fc172836cfae08d6c3957eea477074f37d548e33835ebe3a0e8e697e4fb3cd71c999d3efaa88c990a9d958124c21f1b6f13d8ae61ed1c

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJdQWpze+eJfFpsJOfFpsJe2k:Lpe+ecpe+e/2k

    Score
    9/10
    ransomware

    • Renames multiple (1110) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks