Overview

overview

9

Static

static

3

9edd3921c8...e3.exe

windows7-x64

9

9edd3921c8...e3.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    9edd3921c81d92bcf620e0f0e11fdb5c7f3929a3646f9528ca7bcf9d646065e3

  • Size

    85KB

  • Sample

    240723-a77l2sxhpa

  • MD5

    b89b90d1634cff8755e83b3cd7b8cbb1

  • SHA1

    6fb2829a81a4964deef304ab4170f60a0cf24068

  • SHA256

    9edd3921c81d92bcf620e0f0e11fdb5c7f3929a3646f9528ca7bcf9d646065e3

  • SHA512

    7551773254957c7463e67db9b919b1a7f78d72e25b6f28465dec8a99b13d547c7806e06db67f21707fbe33405e6a073b0f121979a924c9729ae6428570a089b1

  • SSDEEP

    1536:W7ZppApkxUYUP7ZppApkxUYU30NQn0NQ/:6pWpkKpWpkc0NQn0NQ/

Score
9/10
ransomware

Malware Config

Targets

    • Target

      9edd3921c81d92bcf620e0f0e11fdb5c7f3929a3646f9528ca7bcf9d646065e3

    • Size

      85KB

    • MD5

      b89b90d1634cff8755e83b3cd7b8cbb1

    • SHA1

      6fb2829a81a4964deef304ab4170f60a0cf24068

    • SHA256

      9edd3921c81d92bcf620e0f0e11fdb5c7f3929a3646f9528ca7bcf9d646065e3

    • SHA512

      7551773254957c7463e67db9b919b1a7f78d72e25b6f28465dec8a99b13d547c7806e06db67f21707fbe33405e6a073b0f121979a924c9729ae6428570a089b1

    • SSDEEP

      1536:W7ZppApkxUYUP7ZppApkxUYU30NQn0NQ/:6pWpkKpWpkc0NQn0NQ/

    Score
    9/10
    ransomware

    • Renames multiple (4914) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks