fdb343ca28709d30c04f8471f3e7cf861930e2dec1579e8c79be12323194b9a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6561b47d48be21edac2d6e27d092d40N.exe
Size

80KB
Sample

240818-j4ss6athnb
MD5

d6561b47d48be21edac2d6e27d092d40
SHA1

9d9c62b30adb85df040c1bfefce97032881f3120
SHA256

fdb343ca28709d30c04f8471f3e7cf861930e2dec1579e8c79be12323194b9a7
SHA512

49341eccffc0c915bb98bcaa64e4a001f9cd930144c84c84568de854e78f0b4e1389d055d5ab0aa81a17312327e7bf017e4687bcfc9c3427cbf3815495ca3eea
SSDEEP

1536:W7ZhA7pApM21LOA1LOl6vSz7ZhA7pApM21LOA1LOl6vSD:6e7WpMgLOiLO2SRe7WpMgLOiLO2SD

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d6561b47d48be21edac2d6e27d092d40N.exe
- Size
  
  80KB
- MD5
  
  d6561b47d48be21edac2d6e27d092d40
- SHA1
  
  9d9c62b30adb85df040c1bfefce97032881f3120
- SHA256
  
  fdb343ca28709d30c04f8471f3e7cf861930e2dec1579e8c79be12323194b9a7
- SHA512
  
  49341eccffc0c915bb98bcaa64e4a001f9cd930144c84c84568de854e78f0b4e1389d055d5ab0aa81a17312327e7bf017e4687bcfc9c3427cbf3815495ca3eea
- SSDEEP
  
  1536:W7ZhA7pApM21LOA1LOl6vSz7ZhA7pApM21LOA1LOl6vSD:6e7WpMgLOiLO2SRe7WpMgLOiLO2SD
Score

9^/10

discovery ransomware
- Renames multiple (4620) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware