9c601fa8599215deeddb54ccfe0c9f31b0773357be291dacb4e950f6878368fa | Triage

Sharing

General

Target

9c601fa8599215deeddb54ccfe0c9f31b0773357be291dacb4e950f6878368fa
Size

104KB
Sample

240807-bet1xszcrc
MD5

d872274c7016848a9b2843c6d751f109
SHA1

64737a2134e6de3e94e606a2a9e62af2539af734
SHA256

9c601fa8599215deeddb54ccfe0c9f31b0773357be291dacb4e950f6878368fa
SHA512

9a437bd6c0ab45272a395c86f786974e24e9feff7e190b43c8eef91a0d9b6382d0731517ea8c61902d089f6c5fd30ceee6b13ac436a6ed1c1e695d0ebc9107aa
SSDEEP

1536:W7ZppApkxUYU30NQn0NQaY47ZppApkxUYU30NQn0NQaYp:6pWpkc0NQn0NQUpWpkc0NQn0NQt

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9c601fa8599215deeddb54ccfe0c9f31b0773357be291dacb4e950f6878368fa
- Size
  
  104KB
- MD5
  
  d872274c7016848a9b2843c6d751f109
- SHA1
  
  64737a2134e6de3e94e606a2a9e62af2539af734
- SHA256
  
  9c601fa8599215deeddb54ccfe0c9f31b0773357be291dacb4e950f6878368fa
- SHA512
  
  9a437bd6c0ab45272a395c86f786974e24e9feff7e190b43c8eef91a0d9b6382d0731517ea8c61902d089f6c5fd30ceee6b13ac436a6ed1c1e695d0ebc9107aa
- SSDEEP
  
  1536:W7ZppApkxUYU30NQn0NQaY47ZppApkxUYU30NQn0NQaYp:6pWpkc0NQn0NQUpWpkc0NQn0NQt
Score

9^/10

discovery ransomware
- Renames multiple (5255) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware