Overview

overview

9

Static

static

3

23078f063f...33.exe

windows7-x64

9

23078f063f...33.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23078f063fe68966b5a6f96ed524c365d7fc07b123551b01ab702470af9de433

  • Size

    126KB

  • Sample

    240722-x8yf4atgle

  • MD5

    536a78ad6a35923354c9baa5e4f57a8c

  • SHA1

    c9563812fb0ed50eac805c6e8c586e47749af355

  • SHA256

    23078f063fe68966b5a6f96ed524c365d7fc07b123551b01ab702470af9de433

  • SHA512

    92a919f2e69309a91cd9eee00a70291ecafdee177ec3bc63c52f2650d46a5be3865990e55f527973b392ff9e0e8908a1fd93019abefb08076bcafab06c2f8298

  • SSDEEP

    1536:W7ZNLpApCZuvIYXJSpXeXr7ZNLpApCZuvIYXJSpXeXz:6NLWpCZLYZSpu5NLWpCZLYZSpuj

Score
9/10
ransomware

Malware Config

Targets

    • Target

      23078f063fe68966b5a6f96ed524c365d7fc07b123551b01ab702470af9de433

    • Size

      126KB

    • MD5

      536a78ad6a35923354c9baa5e4f57a8c

    • SHA1

      c9563812fb0ed50eac805c6e8c586e47749af355

    • SHA256

      23078f063fe68966b5a6f96ed524c365d7fc07b123551b01ab702470af9de433

    • SHA512

      92a919f2e69309a91cd9eee00a70291ecafdee177ec3bc63c52f2650d46a5be3865990e55f527973b392ff9e0e8908a1fd93019abefb08076bcafab06c2f8298

    • SSDEEP

      1536:W7ZNLpApCZuvIYXJSpXeXr7ZNLpApCZuvIYXJSpXeXz:6NLWpCZLYZSpu5NLWpCZLYZSpuj

    Score
    9/10
    ransomware

    • Renames multiple (4468) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks