Overview

overview

9

Static

static

3

268737e718...0N.exe

windows7-x64

9

268737e718...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    268737e7184725c147deab11f3fb7390N.exe

  • Size

    120KB

  • Sample

    240712-cls8msxaja

  • MD5

    268737e7184725c147deab11f3fb7390

  • SHA1

    6b1615e88c399f65b494a45333a52f0393725f40

  • SHA256

    3f4828512619e6e763014909377855e76a7ebe18a7b851d27515d2cd86b932e5

  • SHA512

    84e66a9af2178d2eb21c821f2c1a0129c326bd3ed75de9b503179d1f425c16bdf2ea112512a239b027baa400d6229e987eb277024e6ac63c19dc583ce7cf30c6

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJYu4g7gNQWpze+eJfFpsJOfFpsJYu4g7gDlGi0XlGi0f:Lpe+eXg7g7pe+eXg7gDlGi0XlGi0f

Score
9/10
ransomware

Malware Config

Targets

    • Target

      268737e7184725c147deab11f3fb7390N.exe

    • Size

      120KB

    • MD5

      268737e7184725c147deab11f3fb7390

    • SHA1

      6b1615e88c399f65b494a45333a52f0393725f40

    • SHA256

      3f4828512619e6e763014909377855e76a7ebe18a7b851d27515d2cd86b932e5

    • SHA512

      84e66a9af2178d2eb21c821f2c1a0129c326bd3ed75de9b503179d1f425c16bdf2ea112512a239b027baa400d6229e987eb277024e6ac63c19dc583ce7cf30c6

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJYu4g7gNQWpze+eJfFpsJOfFpsJYu4g7gDlGi0XlGi0f:Lpe+eXg7g7pe+eXg7gDlGi0XlGi0f

    Score
    9/10
    ransomware

    • Renames multiple (4308) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks