8e75f3183908b8c3fefd05e2104363f0034c387dc19aacc5b2a3ee7df2f0c597 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8305c6033135fb8e358afdbe7141dae0N.exe
Size

103KB
Sample

240806-kf28csvcjl
MD5

8305c6033135fb8e358afdbe7141dae0
SHA1

9a657dd9b14f610cb1c1bea54acaa089057229b6
SHA256

8e75f3183908b8c3fefd05e2104363f0034c387dc19aacc5b2a3ee7df2f0c597
SHA512

e669406fc1a4cb20770aeed7fafb8f53ab9557f26e89f47dd33e96d148902135e658ef285bc9bb9633017191e1215176ad0f2503fc8880d5520fa00a2e1edbba
SSDEEP

1536:W7ZhA7pAppYSiHYSiT7ZhA7pAppYSiHYSi1:6e7WppYvHYvxe7WppYvHYv1

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8305c6033135fb8e358afdbe7141dae0N.exe
- Size
  
  103KB
- MD5
  
  8305c6033135fb8e358afdbe7141dae0
- SHA1
  
  9a657dd9b14f610cb1c1bea54acaa089057229b6
- SHA256
  
  8e75f3183908b8c3fefd05e2104363f0034c387dc19aacc5b2a3ee7df2f0c597
- SHA512
  
  e669406fc1a4cb20770aeed7fafb8f53ab9557f26e89f47dd33e96d148902135e658ef285bc9bb9633017191e1215176ad0f2503fc8880d5520fa00a2e1edbba
- SSDEEP
  
  1536:W7ZhA7pAppYSiHYSiT7ZhA7pAppYSiHYSi1:6e7WppYvHYvxe7WppYvHYv1
Score

9^/10

discovery ransomware
- Renames multiple (3733) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware