7a55bdb733038c250a5a607bd571bc189cb19003bb295a4fc6151bddfd3d479c | Triage

Sharing

General

Target

6d4bc1b233a4d9d59d538b3d00b99af0N.exe
Size

66KB
Sample

240814-kcyqrsxbpn
MD5

6d4bc1b233a4d9d59d538b3d00b99af0
SHA1

6aedd64bc1d97f13c437c41e880b4292a47abe9f
SHA256

7a55bdb733038c250a5a607bd571bc189cb19003bb295a4fc6151bddfd3d479c
SHA512

ba7e474a6ba61df8d565777bb77446a45c000127075bed865d0b7c413d663784ad0183e026298efd83c9119eeb5bc570e540855894971670729a5244e9f3ce4b
SSDEEP

384:yBs7Br5xjL8AgA71FbhvzBs7Br5xjL8AgA71FbhvN9NDt9NDH:/7BlpQpARFbh67BlpQpARFbhlfZfD

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6d4bc1b233a4d9d59d538b3d00b99af0N.exe
- Size
  
  66KB
- MD5
  
  6d4bc1b233a4d9d59d538b3d00b99af0
- SHA1
  
  6aedd64bc1d97f13c437c41e880b4292a47abe9f
- SHA256
  
  7a55bdb733038c250a5a607bd571bc189cb19003bb295a4fc6151bddfd3d479c
- SHA512
  
  ba7e474a6ba61df8d565777bb77446a45c000127075bed865d0b7c413d663784ad0183e026298efd83c9119eeb5bc570e540855894971670729a5244e9f3ce4b
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvzBs7Br5xjL8AgA71FbhvN9NDt9NDH:/7BlpQpARFbh67BlpQpARFbhlfZfD
Score

9^/10

discovery ransomware
- Renames multiple (4202) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware