3f242bd987b2ca3cb485c00301ed66bec05407e2d786daf9e7e1190460860eff | Triage

Sharing

General

Target

361c98789c3acbe89d2221d27fce0950N.exe
Size

134KB
Sample

240726-vvy5cssdlq
MD5

361c98789c3acbe89d2221d27fce0950
SHA1

085461c43dfa9b782109eb50367e701ab131f190
SHA256

3f242bd987b2ca3cb485c00301ed66bec05407e2d786daf9e7e1190460860eff
SHA512

e5a142ba740e0a17378228338c591017a8ef85bfa8e6082ac869614d832e2b374ef3deb7368142ec9ae59b24d5df4663fd3f32c34aec7a7748932e0cdd14cfab
SSDEEP

3072:69WpQEJA2DQ9WpQEJA2Dti/D5zf6ydyf+abMkF24kzK3jbrCkoRWNkzi/D5zf6ye:nfAKfAz

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  361c98789c3acbe89d2221d27fce0950N.exe
- Size
  
  134KB
- MD5
  
  361c98789c3acbe89d2221d27fce0950
- SHA1
  
  085461c43dfa9b782109eb50367e701ab131f190
- SHA256
  
  3f242bd987b2ca3cb485c00301ed66bec05407e2d786daf9e7e1190460860eff
- SHA512
  
  e5a142ba740e0a17378228338c591017a8ef85bfa8e6082ac869614d832e2b374ef3deb7368142ec9ae59b24d5df4663fd3f32c34aec7a7748932e0cdd14cfab
- SSDEEP
  
  3072:69WpQEJA2DQ9WpQEJA2Dti/D5zf6ydyf+abMkF24kzK3jbrCkoRWNkzi/D5zf6ye:nfAKfAz
Score

9^/10

discovery ransomware
- Renames multiple (225) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware