Overview

overview

9

Static

static

3

3c9d7c5d31...17.exe

windows7-x64

9

3c9d7c5d31...17.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c9d7c5d31b4f91c9aa6d65b9daf8d7c9303e96eb4b44f1932f6e3792a98c817.exe

  • Size

    189KB

  • Sample

    240703-fmyrasycqf

  • MD5

    88f043557e98c1451987226ace5ff360

  • SHA1

    8a5b03872a7f8166abff0de26e2ffe97f40a2519

  • SHA256

    3c9d7c5d31b4f91c9aa6d65b9daf8d7c9303e96eb4b44f1932f6e3792a98c817

  • SHA512

    bba3fd02b9d8a09d9d4761fd1b9f1b042f8b95fd71b99fbbd865d4f4d606a25ad1162bd3230cba85a18960d2ec9d3fdff5420665a32cfde523a9ba9234c34c3b

  • SSDEEP

    3072:69WpQE0zUMTcTSWEmOTcTSWEmX9WpQE0zUMTcTSWEmOTcTSWEmh:nIZTIZY

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3c9d7c5d31b4f91c9aa6d65b9daf8d7c9303e96eb4b44f1932f6e3792a98c817.exe

    • Size

      189KB

    • MD5

      88f043557e98c1451987226ace5ff360

    • SHA1

      8a5b03872a7f8166abff0de26e2ffe97f40a2519

    • SHA256

      3c9d7c5d31b4f91c9aa6d65b9daf8d7c9303e96eb4b44f1932f6e3792a98c817

    • SHA512

      bba3fd02b9d8a09d9d4761fd1b9f1b042f8b95fd71b99fbbd865d4f4d606a25ad1162bd3230cba85a18960d2ec9d3fdff5420665a32cfde523a9ba9234c34c3b

    • SSDEEP

      3072:69WpQE0zUMTcTSWEmOTcTSWEmX9WpQE0zUMTcTSWEmOTcTSWEmh:nIZTIZY

    Score
    9/10
    ransomware

    • Renames multiple (3652) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks