0acb24b2973767e4ec58c33240c5cac0a5ec8e8affbaff6507f0f6ee107cbba4 | Triage

Sharing

General

Target

cc262742e699e4ce3b96245c05829070N.exe
Size

168KB
Sample

240802-zkr1hszbkp
MD5

cc262742e699e4ce3b96245c05829070
SHA1

c8c83fd4a8feb37507da62b655994367d2d683c1
SHA256

0acb24b2973767e4ec58c33240c5cac0a5ec8e8affbaff6507f0f6ee107cbba4
SHA512

849eb53a8c0760d27596b4db7cbc759cd6b196e13ea17a4b28b078319d75ff1ed35994b401dfccf33f9a230666bb6aaea12196a6bc264d1211d5cebce5754049
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eGGYe7WpMaxeb0CYJ97lEYNR73e+eGGm:RqKvb0CYJ973e+eGG7qKvb0CYJ973e+d

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  cc262742e699e4ce3b96245c05829070N.exe
- Size
  
  168KB
- MD5
  
  cc262742e699e4ce3b96245c05829070
- SHA1
  
  c8c83fd4a8feb37507da62b655994367d2d683c1
- SHA256
  
  0acb24b2973767e4ec58c33240c5cac0a5ec8e8affbaff6507f0f6ee107cbba4
- SHA512
  
  849eb53a8c0760d27596b4db7cbc759cd6b196e13ea17a4b28b078319d75ff1ed35994b401dfccf33f9a230666bb6aaea12196a6bc264d1211d5cebce5754049
- SSDEEP
  
  3072:6e7WpMaxeb0CYJ97lEYNR73e+eGGYe7WpMaxeb0CYJ97lEYNR73e+eGGm:RqKvb0CYJ973e+eGG7qKvb0CYJ973e+d
Score

9^/10

discovery ransomware
- Renames multiple (3224) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware