Overview

overview

9

Static

static

3

d6d9997bbc...60.exe

windows7-x64

9

d6d9997bbc...60.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6d9997bbce78327ca8098190d38906b3630b074ecf45fa9a85895578ae8a960

  • Size

    128KB

  • Sample

    240630-cz861ssenb

  • MD5

    32ab8cfdffa4c831088740403f694169

  • SHA1

    59ec0e9df4d64c1cdc798cde39743ae47f6a7702

  • SHA256

    d6d9997bbce78327ca8098190d38906b3630b074ecf45fa9a85895578ae8a960

  • SHA512

    091e4ab349ab8a9e6e4794ba5a3bad5122b4982bd9e33f392a9c1c3f120f3fc0907ffad8331fe89f7355ab10fe6edfb53d20431ad2a81fcf98a599a141df9cfb

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJYuflgZhZNQWpze+eJfFpsJOfFpsJYuflgZhZm:Lpe+eylOpe+eylh

Score
9/10
ransomware

Malware Config

Targets

    • Target

      d6d9997bbce78327ca8098190d38906b3630b074ecf45fa9a85895578ae8a960

    • Size

      128KB

    • MD5

      32ab8cfdffa4c831088740403f694169

    • SHA1

      59ec0e9df4d64c1cdc798cde39743ae47f6a7702

    • SHA256

      d6d9997bbce78327ca8098190d38906b3630b074ecf45fa9a85895578ae8a960

    • SHA512

      091e4ab349ab8a9e6e4794ba5a3bad5122b4982bd9e33f392a9c1c3f120f3fc0907ffad8331fe89f7355ab10fe6edfb53d20431ad2a81fcf98a599a141df9cfb

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJYuflgZhZNQWpze+eJfFpsJOfFpsJYuflgZhZm:Lpe+eylOpe+eylh

    Score
    9/10
    ransomware

    • Renames multiple (3851) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks