Overview

overview

9

Static

static

3

49e0d2d7c9...f0.exe

windows7-x64

9

49e0d2d7c9...f0.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    49e0d2d7c992985c2ffed0f8fe93a4f0.exe

  • Size

    163KB

  • Sample

    240706-f97mqazbqh

  • MD5

    49e0d2d7c992985c2ffed0f8fe93a4f0

  • SHA1

    ca78be4724004c8c5f99b8cc77425ef831d1a997

  • SHA256

    461011cc091e7a140486adbdc3a8df1d224c0ee0fb4134187fbc4f63cdef27d0

  • SHA512

    eb960ee1cbb44a978936fd5e933b7eb6408908c6fde13f6aa24336ca62755573e02efa88e5c7f77c91ea69c45daf24194c8ff45e87e4f9a069dc5756005f7560

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyB2:PqFF2Ie+egsqFF2Ie+egU

Score
9/10
ransomware

Malware Config

Targets

    • Target

      49e0d2d7c992985c2ffed0f8fe93a4f0.exe

    • Size

      163KB

    • MD5

      49e0d2d7c992985c2ffed0f8fe93a4f0

    • SHA1

      ca78be4724004c8c5f99b8cc77425ef831d1a997

    • SHA256

      461011cc091e7a140486adbdc3a8df1d224c0ee0fb4134187fbc4f63cdef27d0

    • SHA512

      eb960ee1cbb44a978936fd5e933b7eb6408908c6fde13f6aa24336ca62755573e02efa88e5c7f77c91ea69c45daf24194c8ff45e87e4f9a069dc5756005f7560

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyB2:PqFF2Ie+egsqFF2Ie+egU

    Score
    9/10
    ransomware

    • Renames multiple (3825) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks