Overview

overview

9

Static

static

3

fa393ee058...1c.exe

windows7-x64

9

fa393ee058...1c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa393ee0582d9c96c4fd091787f9e7f1638b49579ace7ada473d9c2febc0c31c

  • Size

    195KB

  • Sample

    240705-fpxl1svhrh

  • MD5

    23e82034218fbdafd82a295b581c9483

  • SHA1

    3557857f8494e4ca68d9be4b242d1bd2bf64db44

  • SHA256

    fa393ee0582d9c96c4fd091787f9e7f1638b49579ace7ada473d9c2febc0c31c

  • SHA512

    d1e6fd89adae124e8d79b400bfa6b3ffb814918a6262a5a4698987abc1fad9a67cb14a66c073773c4db6c37d83bd00d8b3a170abc3d4f86b768af4b1f52a0279

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZOf7faqKvb0CYJ973e+eKZOf7fY2R2P:vvbxYX7Z1vbxYX7Zz2R2P

Score
9/10
ransomware

Malware Config

Targets

    • Target

      fa393ee0582d9c96c4fd091787f9e7f1638b49579ace7ada473d9c2febc0c31c

    • Size

      195KB

    • MD5

      23e82034218fbdafd82a295b581c9483

    • SHA1

      3557857f8494e4ca68d9be4b242d1bd2bf64db44

    • SHA256

      fa393ee0582d9c96c4fd091787f9e7f1638b49579ace7ada473d9c2febc0c31c

    • SHA512

      d1e6fd89adae124e8d79b400bfa6b3ffb814918a6262a5a4698987abc1fad9a67cb14a66c073773c4db6c37d83bd00d8b3a170abc3d4f86b768af4b1f52a0279

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZOf7faqKvb0CYJ973e+eKZOf7fY2R2P:vvbxYX7Z1vbxYX7Zz2R2P

    Score
    9/10
    ransomware

    • Renames multiple (2681) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks