Overview

overview

9

Static

static

3

13b4bbf084...0N.exe

windows7-x64

9

13b4bbf084...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13b4bbf084aa724f2f637f60e36e4130N.exe

  • Size

    194KB

  • Sample

    240721-1c1hcsxhjk

  • MD5

    13b4bbf084aa724f2f637f60e36e4130

  • SHA1

    8fcc2414e53986dfe02e6cdf6031993d62d77b28

  • SHA256

    6e39b87d6f99b589be1e8ded74d55c8479aed7ebd5db00c210e366aada217b37

  • SHA512

    986cf52491280d68d59eba5cfefb46544ecccc2c1667449f6f4d14542f695715f1a29af99d77adc3eab1e3c78f80f566757fdce139f964e7fd0709404b595466

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZOf7fbqKvb0CYJ973e+eKZOf7fl:vvbxYX7Z2vbxYX7Z6

Score
9/10
ransomware

Malware Config

Targets

    • Target

      13b4bbf084aa724f2f637f60e36e4130N.exe

    • Size

      194KB

    • MD5

      13b4bbf084aa724f2f637f60e36e4130

    • SHA1

      8fcc2414e53986dfe02e6cdf6031993d62d77b28

    • SHA256

      6e39b87d6f99b589be1e8ded74d55c8479aed7ebd5db00c210e366aada217b37

    • SHA512

      986cf52491280d68d59eba5cfefb46544ecccc2c1667449f6f4d14542f695715f1a29af99d77adc3eab1e3c78f80f566757fdce139f964e7fd0709404b595466

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZOf7fbqKvb0CYJ973e+eKZOf7fl:vvbxYX7Z2vbxYX7Z6

    Score
    9/10
    ransomware

    • Renames multiple (3934) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks