98bb68961c790db9a43065236d22ad10d5c5f010f66a61c9785ce385163634fd | Triage

Sharing

General

Target

23bf094acb6ef3654c57b735b147d720N.exe
Size

130KB
Sample

240818-tb73gs1ekb
MD5

23bf094acb6ef3654c57b735b147d720
SHA1

5d0064463e8557fa3dcb992204bf45a64d2b5297
SHA256

98bb68961c790db9a43065236d22ad10d5c5f010f66a61c9785ce385163634fd
SHA512

873a712dfad41014cf21fcb685f06ca0f26be75d8e86042d8e6a4f01972180128299fd2bfbe7abf025e3424a525f2ed43d0a7fa25d20ba8802c93e004df389dc
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/Nwmxd137ZppApBULcfpHLcfpX2/Nw/Nwmxd1J:6pWpBwchcV2WxNpWpBwchcV2Wxx

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  23bf094acb6ef3654c57b735b147d720N.exe
- Size
  
  130KB
- MD5
  
  23bf094acb6ef3654c57b735b147d720
- SHA1
  
  5d0064463e8557fa3dcb992204bf45a64d2b5297
- SHA256
  
  98bb68961c790db9a43065236d22ad10d5c5f010f66a61c9785ce385163634fd
- SHA512
  
  873a712dfad41014cf21fcb685f06ca0f26be75d8e86042d8e6a4f01972180128299fd2bfbe7abf025e3424a525f2ed43d0a7fa25d20ba8802c93e004df389dc
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpX2/Nw/Nwmxd137ZppApBULcfpHLcfpX2/Nw/Nwmxd1J:6pWpBwchcV2WxNpWpBwchcV2Wxx
Score

9^/10

discovery ransomware
- Renames multiple (3463) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware