Overview

overview

9

Static

static

3

3422f3926d...c6.exe

windows7-x64

9

3422f3926d...c6.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3422f3926d36070274480edf8dd1a87557d9c0553c04fb69faed6bae0e7686c6.exe

  • Size

    94KB

  • Sample

    240704-dg8yza1cll

  • MD5

    272c72e63e782ce6c202a12b8cdb58a0

  • SHA1

    a80ea0b4ec72cb716dad952a6a6ac4d1268c41a2

  • SHA256

    3422f3926d36070274480edf8dd1a87557d9c0553c04fb69faed6bae0e7686c6

  • SHA512

    cab5fa2f7b11b5ba693e2fdf9379688b1f21eac959ded533ed2cb14b13479fc6fd7edf1701b6f5b8db8aab7ebfaf871db7c28046d08d36c48aa77ff9484afb12

  • SSDEEP

    1536:W7ZppApWmjXWY/IY/57ZppApWmjXWY/IY/9:6pWpWmVjjpWpWmVj9

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3422f3926d36070274480edf8dd1a87557d9c0553c04fb69faed6bae0e7686c6.exe

    • Size

      94KB

    • MD5

      272c72e63e782ce6c202a12b8cdb58a0

    • SHA1

      a80ea0b4ec72cb716dad952a6a6ac4d1268c41a2

    • SHA256

      3422f3926d36070274480edf8dd1a87557d9c0553c04fb69faed6bae0e7686c6

    • SHA512

      cab5fa2f7b11b5ba693e2fdf9379688b1f21eac959ded533ed2cb14b13479fc6fd7edf1701b6f5b8db8aab7ebfaf871db7c28046d08d36c48aa77ff9484afb12

    • SSDEEP

      1536:W7ZppApWmjXWY/IY/57ZppApWmjXWY/IY/9:6pWpWmVjjpWpWmVj9

    Score
    9/10
    ransomware

    • Renames multiple (4513) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks