7b7818a8fdfdd6340f7a56a20e602aaf4d465b7a5df5bda78687b7ddeb777499 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a926bacdaa0731f1abbb4fc32352a8d0N.exe
Size

69KB
Sample

240806-p2ndjstcrc
MD5

a926bacdaa0731f1abbb4fc32352a8d0
SHA1

065b3761eae29aaa737505a3b18aad65fd7e36d2
SHA256

7b7818a8fdfdd6340f7a56a20e602aaf4d465b7a5df5bda78687b7ddeb777499
SHA512

879721cf5a5db2769b3d09c8e04b37b933651d0f8ab1b2f993f9a6d94e810039a06122fb0b1ba1f0cc9271941f0cfd6cc645f86fa39deeb748e57d9d8b7129a0
SSDEEP

384:GBt7Br5xjL7lAgA71Fbhvt3TBt7Br5xjL7lAgA71Fbhvt3Iwl:W7Blp9pARFbh17Blp9pARFbhp

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a926bacdaa0731f1abbb4fc32352a8d0N.exe
- Size
  
  69KB
- MD5
  
  a926bacdaa0731f1abbb4fc32352a8d0
- SHA1
  
  065b3761eae29aaa737505a3b18aad65fd7e36d2
- SHA256
  
  7b7818a8fdfdd6340f7a56a20e602aaf4d465b7a5df5bda78687b7ddeb777499
- SHA512
  
  879721cf5a5db2769b3d09c8e04b37b933651d0f8ab1b2f993f9a6d94e810039a06122fb0b1ba1f0cc9271941f0cfd6cc645f86fa39deeb748e57d9d8b7129a0
- SSDEEP
  
  384:GBt7Br5xjL7lAgA71Fbhvt3TBt7Br5xjL7lAgA71Fbhvt3Iwl:W7Blp9pARFbh17Blp9pARFbhp
Score

9^/10

discovery ransomware
- Renames multiple (3484) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware