8e02b24135cde637bb692d34352db7a612eca30a1683175ac2aac2a86fb9081f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e02b24135cde637bb692d34352db7a612eca30a1683175ac2aac2a86fb9081f
Size

139KB
Sample

240809-3x2l9swbjj
MD5

7cc31f6a63a0a7f9ca5995f90e44c11d
SHA1

724be7b1dce0cd9b6fb54d4827a913b5a8fa706d
SHA256

8e02b24135cde637bb692d34352db7a612eca30a1683175ac2aac2a86fb9081f
SHA512

5cdbacadb7f20a80349fbabb3b9253454a0f57ca73c41dc5059a2bd9cfdf48af08f2fbb2beccc84a76c5566cd5e9569b0dffd7ffe5473ee8de716975cb3418e9
SSDEEP

3072:9QWpze+eJfFpsJOfFpsJ5DATdc6e6kvNDck7Tdc6e6kvNDck/QWpze+eJfFpsJOJ:Lpe+ewDATdc6e6kvNDck7Tdc6e6kvND+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8e02b24135cde637bb692d34352db7a612eca30a1683175ac2aac2a86fb9081f
- Size
  
  139KB
- MD5
  
  7cc31f6a63a0a7f9ca5995f90e44c11d
- SHA1
  
  724be7b1dce0cd9b6fb54d4827a913b5a8fa706d
- SHA256
  
  8e02b24135cde637bb692d34352db7a612eca30a1683175ac2aac2a86fb9081f
- SHA512
  
  5cdbacadb7f20a80349fbabb3b9253454a0f57ca73c41dc5059a2bd9cfdf48af08f2fbb2beccc84a76c5566cd5e9569b0dffd7ffe5473ee8de716975cb3418e9
- SSDEEP
  
  3072:9QWpze+eJfFpsJOfFpsJ5DATdc6e6kvNDck7Tdc6e6kvNDck/QWpze+eJfFpsJOJ:Lpe+ewDATdc6e6kvNDck7Tdc6e6kvND+
Score

9^/10

discovery ransomware
- Renames multiple (4291) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware