Overview

overview

9

Static

static

3

f9ee4a84cc...0N.exe

windows7-x64

9

f9ee4a84cc...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f9ee4a84cc9f60c3cf4ada045d863fe0N.exe

  • Size

    128KB

  • Sample

    240721-wnvc9syaqc

  • MD5

    f9ee4a84cc9f60c3cf4ada045d863fe0

  • SHA1

    e9f1dffb1275cffa597cdc199664f1e9416c1b4b

  • SHA256

    93589bf5d0b3c85a18a88e7e3777fcae6745d21ebc0231b4955081de011da421

  • SHA512

    310de755e4444c87bca346d1d516a7d954438c8d82180340ef30340db17bd5c9aa16850b381ad3f1cbf9a7129cb96c0d6d8bb7d72d52a9eec37713bdde321270

  • SSDEEP

    1536:W7ZppApwEwnmJARJAaXxXNJdkCKPuJdkCKPf7ZppApwEwnmJARJAaXxXNJdkCKPH:6pWpUnDXxX2pWpUnDXxXW

Score
9/10
ransomware

Malware Config

Targets

    • Target

      f9ee4a84cc9f60c3cf4ada045d863fe0N.exe

    • Size

      128KB

    • MD5

      f9ee4a84cc9f60c3cf4ada045d863fe0

    • SHA1

      e9f1dffb1275cffa597cdc199664f1e9416c1b4b

    • SHA256

      93589bf5d0b3c85a18a88e7e3777fcae6745d21ebc0231b4955081de011da421

    • SHA512

      310de755e4444c87bca346d1d516a7d954438c8d82180340ef30340db17bd5c9aa16850b381ad3f1cbf9a7129cb96c0d6d8bb7d72d52a9eec37713bdde321270

    • SSDEEP

      1536:W7ZppApwEwnmJARJAaXxXNJdkCKPuJdkCKPf7ZppApwEwnmJARJAaXxXNJdkCKPH:6pWpUnDXxX2pWpUnDXxXW

    Score
    9/10
    ransomware

    • Renames multiple (333) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks