Overview

overview

9

Static

static

3

0d72dffe52...13.exe

windows7-x64

9

0d72dffe52...13.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d72dffe5295c80fe49eb65ce95a66a26a08339ba6f385fe4e548c400591b613

  • Size

    68KB

  • Sample

    240722-xant1a1fld

  • MD5

    7433828ca3f7b9b7c63a6c40cab7cc27

  • SHA1

    8128bbf513b35bee83f4c324e089ede740abcd21

  • SHA256

    0d72dffe5295c80fe49eb65ce95a66a26a08339ba6f385fe4e548c400591b613

  • SHA512

    7edbdc5a2e7f1b1b91853f59f8eadce6c32cac91acd74f465f397bbf7ddfeddf90a0a7074a0e039ec37756da25675c18c91b67047e904dcd7a0a56440117ecba

  • SSDEEP

    1536:W7ZppApBULcfpHLcfpk7ZppApBULcfpHLcfpt:6pWpBwchcKpWpBwchcb

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0d72dffe5295c80fe49eb65ce95a66a26a08339ba6f385fe4e548c400591b613

    • Size

      68KB

    • MD5

      7433828ca3f7b9b7c63a6c40cab7cc27

    • SHA1

      8128bbf513b35bee83f4c324e089ede740abcd21

    • SHA256

      0d72dffe5295c80fe49eb65ce95a66a26a08339ba6f385fe4e548c400591b613

    • SHA512

      7edbdc5a2e7f1b1b91853f59f8eadce6c32cac91acd74f465f397bbf7ddfeddf90a0a7074a0e039ec37756da25675c18c91b67047e904dcd7a0a56440117ecba

    • SSDEEP

      1536:W7ZppApBULcfpHLcfpk7ZppApBULcfpHLcfpt:6pWpBwchcKpWpBwchcb

    Score
    9/10
    ransomware

    • Renames multiple (3969) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks