Overview

overview

9

Static

static

3

79fe17c073...0N.exe

windows7-x64

9

79fe17c073...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    79fe17c073006c04098645b74ac03a10N.exe

  • Size

    191KB

  • Sample

    240719-k5r4patarp

  • MD5

    79fe17c073006c04098645b74ac03a10

  • SHA1

    3b74dbfc7d5fb24ae399068f9f360c68ca6f81c3

  • SHA256

    54ab1f17ccce8a813ece616bdf8f79d084a000003cea00e0912a203a9bb936ec

  • SHA512

    8882f8c3b853fc07e28db6777ad377df78cd3b4c1eb5526071cfba8492cfcebdb7ce91c7d3887c99648e45fe2a1b009d47c1a7bffeb7f2a91c69f29d5ba7048e

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBi:PqFF2Ie+eFa0oqFF2Ie+eFa00

Score
9/10
ransomware

Malware Config

Targets

    • Target

      79fe17c073006c04098645b74ac03a10N.exe

    • Size

      191KB

    • MD5

      79fe17c073006c04098645b74ac03a10

    • SHA1

      3b74dbfc7d5fb24ae399068f9f360c68ca6f81c3

    • SHA256

      54ab1f17ccce8a813ece616bdf8f79d084a000003cea00e0912a203a9bb936ec

    • SHA512

      8882f8c3b853fc07e28db6777ad377df78cd3b4c1eb5526071cfba8492cfcebdb7ce91c7d3887c99648e45fe2a1b009d47c1a7bffeb7f2a91c69f29d5ba7048e

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBi:PqFF2Ie+eFa0oqFF2Ie+eFa00

    Score
    9/10
    ransomware

    • Renames multiple (3848) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks