f87a1cae893ecb41f7d1685ae221baea65d151677786f0309e83220c01b6937c | Triage

Sharing

General

Target

769168c8c5fc59bfb273052ffcc65870N.exe
Size

73KB
Sample

240727-baeqfawdll
MD5

769168c8c5fc59bfb273052ffcc65870
SHA1

1c9d2ff7a4f1a62c3e3f5cea40856b05183d51c4
SHA256

f87a1cae893ecb41f7d1685ae221baea65d151677786f0309e83220c01b6937c
SHA512

cf8369e3baa9daf176d54525170ecb2210361826d8cc15faabbecf8c3a86141cf13311fe4a37475d6beaa97e973257b62f20a40054cccccd0fc70e06cdd8d84c
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FzzwzscucCBs7Br5xjL8AgA71Fbhv/Fzzwzscucf+i:/7BlpQpARFbhNIF7BlpQpARFbhNIF+i

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  769168c8c5fc59bfb273052ffcc65870N.exe
- Size
  
  73KB
- MD5
  
  769168c8c5fc59bfb273052ffcc65870
- SHA1
  
  1c9d2ff7a4f1a62c3e3f5cea40856b05183d51c4
- SHA256
  
  f87a1cae893ecb41f7d1685ae221baea65d151677786f0309e83220c01b6937c
- SHA512
  
  cf8369e3baa9daf176d54525170ecb2210361826d8cc15faabbecf8c3a86141cf13311fe4a37475d6beaa97e973257b62f20a40054cccccd0fc70e06cdd8d84c
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/FzzwzscucCBs7Br5xjL8AgA71Fbhv/Fzzwzscucf+i:/7BlpQpARFbhNIF7BlpQpARFbhNIF+i
Score

9^/10

discovery ransomware
- Renames multiple (3853) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware