Overview

overview

9

Static

static

3

115211c3ff...0N.exe

windows7-x64

9

115211c3ff...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    115211c3fff186d88f75d332edf30410N.exe

  • Size

    183KB

  • Sample

    240706-w759wasaja

  • MD5

    115211c3fff186d88f75d332edf30410

  • SHA1

    716b03eb9ce6a3d850eed5d9ff0640d55e44919a

  • SHA256

    4d55679e91e4639b1630d1a38938a1b2d26d5c2ee04d5777d836b15f6de4efb0

  • SHA512

    4be1acdf65674f4059c40419b720782252b46c092336ed0a3c6a50b05001daa42b5fe85fda0cea3e920169d45e6b1df0f1c065acf6a4018c8ee9e65f3de80053

  • SSDEEP

    3072:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcksh/UxE9WpQEoTdc6e6kvNDck7Tdc6e6E:nSTdc6e6kvNDck7Tdc6e6kvNDckyUx56

Score
9/10
ransomware

Malware Config

Targets

    • Target

      115211c3fff186d88f75d332edf30410N.exe

    • Size

      183KB

    • MD5

      115211c3fff186d88f75d332edf30410

    • SHA1

      716b03eb9ce6a3d850eed5d9ff0640d55e44919a

    • SHA256

      4d55679e91e4639b1630d1a38938a1b2d26d5c2ee04d5777d836b15f6de4efb0

    • SHA512

      4be1acdf65674f4059c40419b720782252b46c092336ed0a3c6a50b05001daa42b5fe85fda0cea3e920169d45e6b1df0f1c065acf6a4018c8ee9e65f3de80053

    • SSDEEP

      3072:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcksh/UxE9WpQEoTdc6e6kvNDck7Tdc6e6E:nSTdc6e6kvNDck7Tdc6e6kvNDckyUx56

    Score
    9/10
    ransomware

    • Renames multiple (3691) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks