c6ea1cf243e422dc4c46a0b03359cbb155496f8d6205f5dc53ccdcdbab12c60e | Triage

Sharing

General

Target

81a34ca35fea2f7e03ea8a997fc479c0N.exe
Size

91KB
Sample

240819-t5vdgsydkn
MD5

81a34ca35fea2f7e03ea8a997fc479c0
SHA1

ab8c098eff47df1cd039bef732f22eb65fc3154b
SHA256

c6ea1cf243e422dc4c46a0b03359cbb155496f8d6205f5dc53ccdcdbab12c60e
SHA512

c3b9c858a771087a3377874e313565e2695fd2ae90e3dd074c7bbc6f4c653878546c1da6015ec3798962babaebc246632c83f1e9aa50f9641cd9f88d72341fb5
SSDEEP

768:/7BlpQpARFbhNIiJwsJwwnZY7BlpQpARFbhNIiJwsJwwnZm:/7ZQpAplJwsJwwnu7ZQpAplJwsJwwn0

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  81a34ca35fea2f7e03ea8a997fc479c0N.exe
- Size
  
  91KB
- MD5
  
  81a34ca35fea2f7e03ea8a997fc479c0
- SHA1
  
  ab8c098eff47df1cd039bef732f22eb65fc3154b
- SHA256
  
  c6ea1cf243e422dc4c46a0b03359cbb155496f8d6205f5dc53ccdcdbab12c60e
- SHA512
  
  c3b9c858a771087a3377874e313565e2695fd2ae90e3dd074c7bbc6f4c653878546c1da6015ec3798962babaebc246632c83f1e9aa50f9641cd9f88d72341fb5
- SSDEEP
  
  768:/7BlpQpARFbhNIiJwsJwwnZY7BlpQpARFbhNIiJwsJwwnZm:/7ZQpAplJwsJwwnu7ZQpAplJwsJwwn0
Score

9^/10

discovery ransomware
- Renames multiple (4184) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware