Overview

overview

9

Static

static

3

93150b2490...06.exe

windows7-x64

9

93150b2490...06.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93150b2490ca3f278e9ffcabe50e027bf813c60278c83e2a3dce9203ab1f8306

  • Size

    94KB

  • Sample

    240706-apg9fazfjn

  • MD5

    5ed9f63c06f074adad12ac05ddf2a89c

  • SHA1

    8999d494480cb6eb95c4a95cfe4ff55d94b462fb

  • SHA256

    93150b2490ca3f278e9ffcabe50e027bf813c60278c83e2a3dce9203ab1f8306

  • SHA512

    d80c764f147a53d2fbfcb9a15a9a87cfa0ce1ff36281f79614b6e549b10f93b62c081f71f86f964dc8eedd5787fa82dde476459ab1b687f85ac62afbda9e2eca

  • SSDEEP

    768:W7BlpppARFbhFAo+7EXBwzEXBwhRFRm7BlpppARFbhFAo+7EXBwzEXBwhRFRQtKH:W7ZppApR+pRFRm7ZppApR+pRFR9

Score
9/10
ransomware

Malware Config

Targets

    • Target

      93150b2490ca3f278e9ffcabe50e027bf813c60278c83e2a3dce9203ab1f8306

    • Size

      94KB

    • MD5

      5ed9f63c06f074adad12ac05ddf2a89c

    • SHA1

      8999d494480cb6eb95c4a95cfe4ff55d94b462fb

    • SHA256

      93150b2490ca3f278e9ffcabe50e027bf813c60278c83e2a3dce9203ab1f8306

    • SHA512

      d80c764f147a53d2fbfcb9a15a9a87cfa0ce1ff36281f79614b6e549b10f93b62c081f71f86f964dc8eedd5787fa82dde476459ab1b687f85ac62afbda9e2eca

    • SSDEEP

      768:W7BlpppARFbhFAo+7EXBwzEXBwhRFRm7BlpppARFbhFAo+7EXBwzEXBwhRFRQtKH:W7ZppApR+pRFRm7ZppApR+pRFR9

    Score
    9/10
    ransomware

    • Renames multiple (4983) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks