Overview

overview

9

Static

static

3

fd3a8b1683...ee.exe

windows7-x64

9

fd3a8b1683...ee.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd3a8b1683ef7407ca46b907d0a0c8fef0bf854e585e0918566f3900098886ee

  • Size

    93KB

  • Sample

    240706-ftte6awelj

  • MD5

    518eee4cad322d50a89a19f581bc4b8b

  • SHA1

    3a6746aee436675e0958da5f5db5ebe3f085c261

  • SHA256

    fd3a8b1683ef7407ca46b907d0a0c8fef0bf854e585e0918566f3900098886ee

  • SHA512

    d81657748a537e567fa72bb1f4d05f1a213f660bcef98ab58ccdccd791982cc89a04ffd6fa6f7137914a90631b28c1647d952ec245412d2345beda6231118f0c

  • SSDEEP

    1536:W7ZppAp1IWINI2Ic7ZppAp1IWINI2Ilih:6pWp1IWIy3cpWp1IWIy3q

Score
9/10
ransomware

Malware Config

Targets

    • Target

      fd3a8b1683ef7407ca46b907d0a0c8fef0bf854e585e0918566f3900098886ee

    • Size

      93KB

    • MD5

      518eee4cad322d50a89a19f581bc4b8b

    • SHA1

      3a6746aee436675e0958da5f5db5ebe3f085c261

    • SHA256

      fd3a8b1683ef7407ca46b907d0a0c8fef0bf854e585e0918566f3900098886ee

    • SHA512

      d81657748a537e567fa72bb1f4d05f1a213f660bcef98ab58ccdccd791982cc89a04ffd6fa6f7137914a90631b28c1647d952ec245412d2345beda6231118f0c

    • SSDEEP

      1536:W7ZppAp1IWINI2Ic7ZppAp1IWINI2Ilih:6pWp1IWIy3cpWp1IWIy3q

    Score
    9/10
    ransomware

    • Renames multiple (4836) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks