Overview

overview

9

Static

static

3

b04764cfcd...0N.exe

windows7-x64

9

b04764cfcd...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b04764cfcd6c0ee0078fc6cef5d05400N.exe

  • Size

    506KB

  • Sample

    240807-m5evga1cme

  • MD5

    b04764cfcd6c0ee0078fc6cef5d05400

  • SHA1

    780a74841342ca441600e29885888a97d1eb1fda

  • SHA256

    e3d1835f350d5e76c5304466067d0656bc3717607623c5ad97a48573e5c5f72a

  • SHA512

    1718b06694b8f6eaf8c5a196fc904a5ba5fe5fb57c3dba8e1b87a206d7a39bb1e7d3a12cf35c8c44841e3eedadbbc46bbb3fbc24aaf2564760e55fd84a69095f

  • SSDEEP

    6144:PuhFYrIOXsqmWzJrdc6GJRQUWGUA9PRWLiFSbE56FORFe:S2lWRPWhA9PRWg9O

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      b04764cfcd6c0ee0078fc6cef5d05400N.exe

    • Size

      506KB

    • MD5

      b04764cfcd6c0ee0078fc6cef5d05400

    • SHA1

      780a74841342ca441600e29885888a97d1eb1fda

    • SHA256

      e3d1835f350d5e76c5304466067d0656bc3717607623c5ad97a48573e5c5f72a

    • SHA512

      1718b06694b8f6eaf8c5a196fc904a5ba5fe5fb57c3dba8e1b87a206d7a39bb1e7d3a12cf35c8c44841e3eedadbbc46bbb3fbc24aaf2564760e55fd84a69095f

    • SSDEEP

      6144:PuhFYrIOXsqmWzJrdc6GJRQUWGUA9PRWLiFSbE56FORFe:S2lWRPWhA9PRWg9O

    Score
    9/10
    discoveryransomware

    • Renames multiple (3279) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks