2a5ab6218016f97b5b4ee36ccded0f63d7c3cccfb1efcab536dc169a584b6d53 | Triage

Sharing

General

Target

06287433ac02d4adba44f2bbff9b4cd0N.exe
Size

87KB
Sample

240801-1d4leaxamk
MD5

06287433ac02d4adba44f2bbff9b4cd0
SHA1

c234b776a246f6c383b6c13e6a27b71764d18510
SHA256

2a5ab6218016f97b5b4ee36ccded0f63d7c3cccfb1efcab536dc169a584b6d53
SHA512

3ed2bd5916041af8cbacf73b6ffa40aa16739cb79b97625846fc3efe36a3aa6377570e8ca5c65472af540ed9c48b32bf04177f099a9ad91a0563845229e65a75
SSDEEP

768:W7BlpppARFbhbt7Y7wTCIofQOiJfofQOiJh7BlpppARFbhbt7Y7wTCIofQOiJfov:W7ZppApqHW7ZppApqHn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  06287433ac02d4adba44f2bbff9b4cd0N.exe
- Size
  
  87KB
- MD5
  
  06287433ac02d4adba44f2bbff9b4cd0
- SHA1
  
  c234b776a246f6c383b6c13e6a27b71764d18510
- SHA256
  
  2a5ab6218016f97b5b4ee36ccded0f63d7c3cccfb1efcab536dc169a584b6d53
- SHA512
  
  3ed2bd5916041af8cbacf73b6ffa40aa16739cb79b97625846fc3efe36a3aa6377570e8ca5c65472af540ed9c48b32bf04177f099a9ad91a0563845229e65a75
- SSDEEP
  
  768:W7BlpppARFbhbt7Y7wTCIofQOiJfofQOiJh7BlpppARFbhbt7Y7wTCIofQOiJfov:W7ZppApqHW7ZppApqHn
Score

9^/10

discovery ransomware
- Renames multiple (229) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware