3a2f325d751ab5a776f5297c25c1ff5fa8a3be683719497efbd74cd22980f52e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c080d174e760fad2b5fcd8b19938cff0N.exe
Size

173KB
Sample

240806-scn6bswbpf
MD5

c080d174e760fad2b5fcd8b19938cff0
SHA1

a7c26ba1be72288b52742c286c6a1393a321f7dd
SHA256

3a2f325d751ab5a776f5297c25c1ff5fa8a3be683719497efbd74cd22980f52e
SHA512

1116e74b90a4c8e6efa1ac727d0774dc30cde3816aab47588e502bceda7e3fd854e6bbd68c4b84e82e04f8231f780d5ec49be8781d99e41044142f269f92f6d6
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBX:PqFF2Ie+eFYDwqFF2Ie+eFYDh

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  c080d174e760fad2b5fcd8b19938cff0N.exe
- Size
  
  173KB
- MD5
  
  c080d174e760fad2b5fcd8b19938cff0
- SHA1
  
  a7c26ba1be72288b52742c286c6a1393a321f7dd
- SHA256
  
  3a2f325d751ab5a776f5297c25c1ff5fa8a3be683719497efbd74cd22980f52e
- SHA512
  
  1116e74b90a4c8e6efa1ac727d0774dc30cde3816aab47588e502bceda7e3fd854e6bbd68c4b84e82e04f8231f780d5ec49be8781d99e41044142f269f92f6d6
- SSDEEP
  
  3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBX:PqFF2Ie+eFYDwqFF2Ie+eFYDh
Score

9^/10

discovery ransomware
- Renames multiple (3956) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware