Analysis

  • max time kernel
    120s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/07/2024, 20:46

General

  • Target

    0b5fb9e153f0cb537d28d10c842f5310N.exe

  • Size

    96KB

  • MD5

    0b5fb9e153f0cb537d28d10c842f5310

  • SHA1

    5122d5a47bb0305596b9a6b917a1c5cb4830f17f

  • SHA256

    38cc9a10dbcc39bf2e656b01ab3bc7624d97ca818804b74e5e0399cc52735e99

  • SHA512

    36e9839b86a2078e99a4b04450d559a418f2fbc0e10ada346507cbc5eb04036494d740122fbffe669980fc143fc597ffc2546971565f5daf68204bef56f844b5

  • SSDEEP

    3072:6e7WpP9oVLQthbYY9oVLQthbUvRIWI83B1:RqAZIWIy1

Score
9/10

Malware Config

Signatures

  • Renames multiple (4185) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b5fb9e153f0cb537d28d10c842f5310N.exe
    "C:\Users\Admin\AppData\Local\Temp\0b5fb9e153f0cb537d28d10c842f5310N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:4064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-464762018-485119342-1613148473-1000\desktop.ini.tmp

    Filesize

    96KB

    MD5

    a8ff9d7743dca155d41407dd6b3f0798

    SHA1

    8b87d24e8ddf3ba09a21b27ab0d3c95e57671b15

    SHA256

    c40fc68e5fe59f43526cd357b469719255d5a84ed8a1e59ab93963faee29636e

    SHA512

    f53ca90bba1f18b56a7970345c226b507bba5245250fc139d7a643ead8156a776a3249e12d2e2f7be839bcd956ba0feb9d5ea2b4bf7dedc32f6988d5ac459dca

  • C:\Program Files\7-Zip\7-zip.dll.exe

    Filesize

    195KB

    MD5

    fc1c28196a493b62358a5c9617ef6785

    SHA1

    d7e8d7233197fab480c24faab7c00ed84f1ebeab

    SHA256

    575a95d338eac4ddcd47f143df74aad4ec777931db2f1c9b9258435f6bf6ec55

    SHA512

    7bb1a196b7d0f0b27a854a12a74f56ed724d122b528d49dc9625180e62257f2c7c4e3039c419a2d4cfb668184ad5698afe1e5ed6d86a062d8198b242fb604537