954e7c4cc76a515fbea4b17904d42660a5d872b0338e844e1b50f0d8b04cb9c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7508f5aee60b2fa28637d41139a9f0a0N.exe
Size

94KB
Sample

240819-tg24estckc
MD5

7508f5aee60b2fa28637d41139a9f0a0
SHA1

d76d1e65d0adbe7f967da103416a7f37712591b1
SHA256

954e7c4cc76a515fbea4b17904d42660a5d872b0338e844e1b50f0d8b04cb9c5
SHA512

38c5e37c55b238485e15d3f523442d8e27d9d2e5f416ff81c54b8fbad48d9c101665957f8a4078729a732d5ea7e1453f2cade48d692a6cc7ba44c37e0f033c5a
SSDEEP

1536:/7ZQpApdEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVz8FUDrYYaCusjr7ZQpAx:9QWpdEKxVTLJtxoVz8FUDrYYaCusjdEf

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  7508f5aee60b2fa28637d41139a9f0a0N.exe
- Size
  
  94KB
- MD5
  
  7508f5aee60b2fa28637d41139a9f0a0
- SHA1
  
  d76d1e65d0adbe7f967da103416a7f37712591b1
- SHA256
  
  954e7c4cc76a515fbea4b17904d42660a5d872b0338e844e1b50f0d8b04cb9c5
- SHA512
  
  38c5e37c55b238485e15d3f523442d8e27d9d2e5f416ff81c54b8fbad48d9c101665957f8a4078729a732d5ea7e1453f2cade48d692a6cc7ba44c37e0f033c5a
- SSDEEP
  
  1536:/7ZQpApdEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVz8FUDrYYaCusjr7ZQpAx:9QWpdEKxVTLJtxoVz8FUDrYYaCusjdEf
Score

9^/10

discovery ransomware
- Renames multiple (4683) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware