Overview

overview

9

Static

static

3

1b79942019...0N.exe

windows7-x64

9

1b79942019...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b799420190690c8df5a9a93d58f2df0N.exe

  • Size

    148KB

  • Sample

    240713-alc6baxcll

  • MD5

    1b799420190690c8df5a9a93d58f2df0

  • SHA1

    030d992a564a9ad63bf44e5d96b04cd47a76f841

  • SHA256

    51e4649f4392387e56b2344d3f4db110d6b8aded966c9f971e34eae609817dca

  • SHA512

    33ebb191998724f63ce7c18864206c485f9d2de8f9c28d546f064026e9d7635d1890a24df157481ef6755676fdb393eb16e17f24164ddd697d87ecaf3abcf6cb

  • SSDEEP

    1536:W7ZDpApYbWjIoPyPoLzV7c6Sh1X27ZDpApYbWjIoPyPoLzV7c6Sh1XL:6DWpfDWpq

Score
9/10
ransomware

Malware Config

Targets

    • Target

      1b799420190690c8df5a9a93d58f2df0N.exe

    • Size

      148KB

    • MD5

      1b799420190690c8df5a9a93d58f2df0

    • SHA1

      030d992a564a9ad63bf44e5d96b04cd47a76f841

    • SHA256

      51e4649f4392387e56b2344d3f4db110d6b8aded966c9f971e34eae609817dca

    • SHA512

      33ebb191998724f63ce7c18864206c485f9d2de8f9c28d546f064026e9d7635d1890a24df157481ef6755676fdb393eb16e17f24164ddd697d87ecaf3abcf6cb

    • SSDEEP

      1536:W7ZDpApYbWjIoPyPoLzV7c6Sh1X27ZDpApYbWjIoPyPoLzV7c6Sh1XL:6DWpfDWpq

    Score
    9/10
    ransomware

    • Renames multiple (3945) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks