General
-
Target
10e93a6d444b1a0394e75a5608af4a50N.exe
-
Size
88KB
-
Sample
240721-z4rtvsveqd
-
MD5
10e93a6d444b1a0394e75a5608af4a50
-
SHA1
3cded95430e163b275ded16f00d3a177b51f4397
-
SHA256
3c9855441cc6fcac2ab6a32a571755915adf19d5bfb1b18e1b4793d01945bb81
-
SHA512
343725cdc24f5d8bbe1bfdbd5cd3f52f1fe859c7adb928779adb12770790146bd1bfc6320369a82b62600cb888278fbb104484719bc7e96ced0f642723ec86d9
-
SSDEEP
1536:W7ZhA7pApH1BkrH61fDp7ZhA7pApH1BkrH61fD2+2:6e7WpaATe7WpaAY
Static task
static1
Behavioral task
behavioral1
Sample
10e93a6d444b1a0394e75a5608af4a50N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
10e93a6d444b1a0394e75a5608af4a50N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
10e93a6d444b1a0394e75a5608af4a50N.exe
-
Size
88KB
-
MD5
10e93a6d444b1a0394e75a5608af4a50
-
SHA1
3cded95430e163b275ded16f00d3a177b51f4397
-
SHA256
3c9855441cc6fcac2ab6a32a571755915adf19d5bfb1b18e1b4793d01945bb81
-
SHA512
343725cdc24f5d8bbe1bfdbd5cd3f52f1fe859c7adb928779adb12770790146bd1bfc6320369a82b62600cb888278fbb104484719bc7e96ced0f642723ec86d9
-
SSDEEP
1536:W7ZhA7pApH1BkrH61fDp7ZhA7pApH1BkrH61fD2+2:6e7WpaATe7WpaAY
Score9/10-
Renames multiple (4505) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-