Overview

overview

9

Static

static

3

1229726580...0N.exe

windows7-x64

9

1229726580...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1229726580262553c850c9c9ad647fc0N.exe

  • Size

    81KB

  • Sample

    240806-1pfcys1grk

  • MD5

    1229726580262553c850c9c9ad647fc0

  • SHA1

    189ef3afbd7a2374d3c063b09b264b7a00023adf

  • SHA256

    73a9bdeb60d7794daf163335af39d909aa05f016a5b7c055cd8d1a89c501084e

  • SHA512

    e93fc7948939d0094af6c95c724a240d6abf2327145ca299bccdabf9456b3768a0e670ce38efe10d3150db9f9fdfaa973fd7ef7bbcc24f3a0c35fadf93fce888

  • SSDEEP

    1536:W7ZppApFJymJyX7ZppApFJymJyHPG0PGa:6pWp6pWp+PxPZ

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      1229726580262553c850c9c9ad647fc0N.exe

    • Size

      81KB

    • MD5

      1229726580262553c850c9c9ad647fc0

    • SHA1

      189ef3afbd7a2374d3c063b09b264b7a00023adf

    • SHA256

      73a9bdeb60d7794daf163335af39d909aa05f016a5b7c055cd8d1a89c501084e

    • SHA512

      e93fc7948939d0094af6c95c724a240d6abf2327145ca299bccdabf9456b3768a0e670ce38efe10d3150db9f9fdfaa973fd7ef7bbcc24f3a0c35fadf93fce888

    • SSDEEP

      1536:W7ZppApFJymJyX7ZppApFJymJyHPG0PGa:6pWp6pWp+PxPZ

    Score
    9/10
    discoveryransomware

    • Renames multiple (4254) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks