Overview

overview

9

Static

static

3

9ce802a13c...0N.exe

windows7-x64

9

9ce802a13c...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ce802a13c724e961c4c21b3544db570N.exe

  • Size

    117KB

  • Sample

    240722-mhh9datbpr

  • MD5

    9ce802a13c724e961c4c21b3544db570

  • SHA1

    084e5f668c3dd7c9e5915a99902503664cad17c7

  • SHA256

    bf974d1d0e112f568586de5e6c15d34854e8151da21a7e66f089477241fb3e00

  • SHA512

    f5d09abfc49b6faa2af880163b2ef0f7a8e778615f39f0a6a765b8c12856a38a5636c7ddf06e9677d56387adc9ac25e9067f7fda8826bd2ee89b1886a6b490c9

  • SSDEEP

    768:W7BlpppARFbhWJq5nosMosToFwA9J/iA9JDwA9J/iA9JK7BlpppARFbhWJq5nosQ:W7ZppApF5noZo4oU7ZppApF5noZo4oM

Score
9/10
ransomware

Malware Config

Targets

    • Target

      9ce802a13c724e961c4c21b3544db570N.exe

    • Size

      117KB

    • MD5

      9ce802a13c724e961c4c21b3544db570

    • SHA1

      084e5f668c3dd7c9e5915a99902503664cad17c7

    • SHA256

      bf974d1d0e112f568586de5e6c15d34854e8151da21a7e66f089477241fb3e00

    • SHA512

      f5d09abfc49b6faa2af880163b2ef0f7a8e778615f39f0a6a765b8c12856a38a5636c7ddf06e9677d56387adc9ac25e9067f7fda8826bd2ee89b1886a6b490c9

    • SSDEEP

      768:W7BlpppARFbhWJq5nosMosToFwA9J/iA9JDwA9J/iA9JK7BlpppARFbhWJq5nosQ:W7ZppApF5noZo4oU7ZppApF5noZo4oM

    Score
    9/10
    ransomware

    • Renames multiple (4483) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks