Overview

overview

9

Static

static

3

32f93604a5...0N.exe

windows7-x64

9

32f93604a5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32f93604a550dfb0929cd5b5276121f0N.exe

  • Size

    724KB

  • Sample

    240724-b1g89a1amq

  • MD5

    32f93604a550dfb0929cd5b5276121f0

  • SHA1

    cb1855204a871b9c2f1b45415f76dad079499a55

  • SHA256

    4557168ef51b7c0bddf12d06c1d77074350a617301248042d80af2cf669abf72

  • SHA512

    06b98a53dab3747d47fe7781877ba2106d929d0a8a8051f7876d2ca207376a353d1614d5d84f80fa8ea81a44ef0b0a38dab6316d09e31535f1b9b78d612e9d5f

  • SSDEEP

    12288:iFF2nnMwHskY7gjcjhVIEhqgM7bWvcsi6aVlXIyJgJGP9/ztLlAZHYN:iFF2nMysZgjS1hqgSC/izNfOJGlbhlA6

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      32f93604a550dfb0929cd5b5276121f0N.exe

    • Size

      724KB

    • MD5

      32f93604a550dfb0929cd5b5276121f0

    • SHA1

      cb1855204a871b9c2f1b45415f76dad079499a55

    • SHA256

      4557168ef51b7c0bddf12d06c1d77074350a617301248042d80af2cf669abf72

    • SHA512

      06b98a53dab3747d47fe7781877ba2106d929d0a8a8051f7876d2ca207376a353d1614d5d84f80fa8ea81a44ef0b0a38dab6316d09e31535f1b9b78d612e9d5f

    • SSDEEP

      12288:iFF2nnMwHskY7gjcjhVIEhqgM7bWvcsi6aVlXIyJgJGP9/ztLlAZHYN:iFF2nMysZgjS1hqgSC/izNfOJGlbhlA6

    Score
    9/10
    discoveryransomware

    • Renames multiple (230) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks