5a55077e6d6693d4fc72080d3394a6b69208dccb0a3769dfee419a2e655359a5 | Triage

Sharing

General

Target

50d72ac4850ba5da6163c45cb6daf250N.exe
Size

67KB
Sample

240724-f1axdstald
MD5

50d72ac4850ba5da6163c45cb6daf250
SHA1

85cc8ebddcd957bb13c19e27eb963254f2071300
SHA256

5a55077e6d6693d4fc72080d3394a6b69208dccb0a3769dfee419a2e655359a5
SHA512

4d68c4ab1773a50628fe5759c286cfc4e47b28eaa632022abdce82467c821b357aa7f27f1d2d12a9fe6dd5d8a0b860c234550b695d430f62764e72e240234326
SSDEEP

1536:W7ZppApBULcfpHLcfp47ZppApBULcfpHLcfpD:6pWpBwchcypWpBwchc9

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  50d72ac4850ba5da6163c45cb6daf250N.exe
- Size
  
  67KB
- MD5
  
  50d72ac4850ba5da6163c45cb6daf250
- SHA1
  
  85cc8ebddcd957bb13c19e27eb963254f2071300
- SHA256
  
  5a55077e6d6693d4fc72080d3394a6b69208dccb0a3769dfee419a2e655359a5
- SHA512
  
  4d68c4ab1773a50628fe5759c286cfc4e47b28eaa632022abdce82467c821b357aa7f27f1d2d12a9fe6dd5d8a0b860c234550b695d430f62764e72e240234326
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfp47ZppApBULcfpHLcfpD:6pWpBwchcypWpBwchc9
Score

9^/10

discovery ransomware
- Renames multiple (307) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware