5413ba3a24997258eb87aa2d285cfe8af1ecc2076914010038e416ebfefafa25 | Triage

Sharing

General

Target

8d52237f8724776f784cdea067dc0890N.exe
Size

136KB
Sample

240806-lh6h8swaqj
MD5

8d52237f8724776f784cdea067dc0890
SHA1

7bafa980a04aa08a9e8a9c3f67ece5191805dbd4
SHA256

5413ba3a24997258eb87aa2d285cfe8af1ecc2076914010038e416ebfefafa25
SHA512

6c31c367f92b0d2b0bd0ef1c636c74a8a86514ba9397fdb76e3407e183b8070515dec52843d458e729903ee69d0034b452c48fe66795b91d19bd0ac77606be74
SSDEEP

1536:W7ZhA7pApMNcH6gW4Wvs9s2cic8GhGvn17ZhA7pApMNcH6gW4Wvs9s2cic8GhGvk:6e7WpMNcK9vG1WKe7WpMNcK9vG1WV

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8d52237f8724776f784cdea067dc0890N.exe
- Size
  
  136KB
- MD5
  
  8d52237f8724776f784cdea067dc0890
- SHA1
  
  7bafa980a04aa08a9e8a9c3f67ece5191805dbd4
- SHA256
  
  5413ba3a24997258eb87aa2d285cfe8af1ecc2076914010038e416ebfefafa25
- SHA512
  
  6c31c367f92b0d2b0bd0ef1c636c74a8a86514ba9397fdb76e3407e183b8070515dec52843d458e729903ee69d0034b452c48fe66795b91d19bd0ac77606be74
- SSDEEP
  
  1536:W7ZhA7pApMNcH6gW4Wvs9s2cic8GhGvn17ZhA7pApMNcH6gW4Wvs9s2cic8GhGvk:6e7WpMNcK9vG1WKe7WpMNcK9vG1WV
Score

9^/10

discovery ransomware
- Renames multiple (452) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware