Overview

overview

9

Static

static

3

e945a73c42...0N.exe

windows7-x64

9

e945a73c42...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e945a73c42db1c1b5eac8a3a8a151e00N.exe

  • Size

    100KB

  • Sample

    240721-tw78zsxdlm

  • MD5

    e945a73c42db1c1b5eac8a3a8a151e00

  • SHA1

    10fae795b8312648cc1d45b7454eeb1c0614e1b3

  • SHA256

    1480a69a30c4c59b9807f5f8e5463769eb3c3120d9d7edf337fe33f741bd2f52

  • SHA512

    ed9e4c7ad40c335a1ac923a02597439556f931e1c83e2502376c64df383508266478562c05edbc8a5c2ce855218dba357a60fe213c999aead51c756a2d92e0fb

  • SSDEEP

    3072:9QWpze+eO888888888888888888888888888888888888888888888888888888U:Lpe+ekeq1m

Score
9/10
ransomware

Malware Config

Targets

    • Target

      e945a73c42db1c1b5eac8a3a8a151e00N.exe

    • Size

      100KB

    • MD5

      e945a73c42db1c1b5eac8a3a8a151e00

    • SHA1

      10fae795b8312648cc1d45b7454eeb1c0614e1b3

    • SHA256

      1480a69a30c4c59b9807f5f8e5463769eb3c3120d9d7edf337fe33f741bd2f52

    • SHA512

      ed9e4c7ad40c335a1ac923a02597439556f931e1c83e2502376c64df383508266478562c05edbc8a5c2ce855218dba357a60fe213c999aead51c756a2d92e0fb

    • SSDEEP

      3072:9QWpze+eO888888888888888888888888888888888888888888888888888888U:Lpe+ekeq1m

    Score
    9/10
    ransomware

    • Renames multiple (2839) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks