Overview

overview

9

Static

static

3

97e8e5b070...e4.exe

windows7-x64

9

97e8e5b070...e4.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97e8e5b070203fc141c6e3028099da00b39f9bd552c7db18a86c24c0b6b890e4

  • Size

    107KB

  • Sample

    240708-b1p9vswepr

  • MD5

    9ed1585628a52200e21dfeee80d2ed1d

  • SHA1

    0c779a33b6c3dff292e57d3ca9ad2f880e18cacf

  • SHA256

    97e8e5b070203fc141c6e3028099da00b39f9bd552c7db18a86c24c0b6b890e4

  • SHA512

    24475fef298a158665a41c118697d2eb660334fa2562f7286b3118d5883a6c9117e175baebf8bad8e42115160a17de44e9061bf8559655c534b2a968fede0b69

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJju8QWpze+eJfFpsJOfFpsJjuyPxPC:Lpe+e4uspe+e4uyPxPC

Score
9/10
ransomware

Malware Config

Targets

    • Target

      97e8e5b070203fc141c6e3028099da00b39f9bd552c7db18a86c24c0b6b890e4

    • Size

      107KB

    • MD5

      9ed1585628a52200e21dfeee80d2ed1d

    • SHA1

      0c779a33b6c3dff292e57d3ca9ad2f880e18cacf

    • SHA256

      97e8e5b070203fc141c6e3028099da00b39f9bd552c7db18a86c24c0b6b890e4

    • SHA512

      24475fef298a158665a41c118697d2eb660334fa2562f7286b3118d5883a6c9117e175baebf8bad8e42115160a17de44e9061bf8559655c534b2a968fede0b69

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJju8QWpze+eJfFpsJOfFpsJjuyPxPC:Lpe+e4uspe+e4uyPxPC

    Score
    9/10
    ransomware

    • Renames multiple (350) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks