Overview

overview

9

Static

static

3

75079d8976...3a.exe

windows7-x64

9

75079d8976...3a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75079d8976d320ab10c3c22624d033a7612f9dd13a7d88728db0bcd86f544c3a

  • Size

    68KB

  • Sample

    240625-22r3ys1hjj

  • MD5

    c72c3f8ab61a66afd21706a6a9373272

  • SHA1

    72ab817c1897c5c56f9f6b3f3886e11e909f99bd

  • SHA256

    75079d8976d320ab10c3c22624d033a7612f9dd13a7d88728db0bcd86f544c3a

  • SHA512

    55c9f72ede1903da9dc274f6dba4df54d0ff34855209ae076a02223f6d8584d248ed5cb4e7799ad5e4d743cbd6c1def39b119b38ad25d299c459491e2e42220b

  • SSDEEP

    1536:W7ZppApBULcfpHLcfpr7ZppApBULcfpHLcfpNCum:6pWpBwchcjpWpBwchceum

Score
9/10
ransomware

Malware Config

Targets

    • Target

      75079d8976d320ab10c3c22624d033a7612f9dd13a7d88728db0bcd86f544c3a

    • Size

      68KB

    • MD5

      c72c3f8ab61a66afd21706a6a9373272

    • SHA1

      72ab817c1897c5c56f9f6b3f3886e11e909f99bd

    • SHA256

      75079d8976d320ab10c3c22624d033a7612f9dd13a7d88728db0bcd86f544c3a

    • SHA512

      55c9f72ede1903da9dc274f6dba4df54d0ff34855209ae076a02223f6d8584d248ed5cb4e7799ad5e4d743cbd6c1def39b119b38ad25d299c459491e2e42220b

    • SSDEEP

      1536:W7ZppApBULcfpHLcfpr7ZppApBULcfpHLcfpNCum:6pWpBwchcjpWpBwchceum

    Score
    9/10
    ransomware

    • Renames multiple (4529) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks