Overview

overview

9

Static

static

3

d7c2a8ac76...0N.exe

windows7-x64

9

d7c2a8ac76...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7c2a8ac769a2cd4bfdfc90799c17ab0N.exe

  • Size

    368KB

  • Sample

    240819-zac4lsthjd

  • MD5

    d7c2a8ac769a2cd4bfdfc90799c17ab0

  • SHA1

    4a17f7e0bfef69ea2615b10bc4a72717e0ac08e4

  • SHA256

    5b25f052499d3b0e9b3fd0d9820a37c73880fd582726afcf28c7eddb1b6771d9

  • SHA512

    b5bf0f7d2508798685e6673fdc0e10604d07cb7a484bdfa0f1f06fdfeafb01a57c34a934d94e83b0e2e75dd5274681ffbe8835a073704f49d1742154cc6073f9

  • SSDEEP

    6144:RqKB+tOkWKR0iJ0MnW5NqKB+tOkWKR0iJ0MnW5x:v4Hnc4HnG

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      d7c2a8ac769a2cd4bfdfc90799c17ab0N.exe

    • Size

      368KB

    • MD5

      d7c2a8ac769a2cd4bfdfc90799c17ab0

    • SHA1

      4a17f7e0bfef69ea2615b10bc4a72717e0ac08e4

    • SHA256

      5b25f052499d3b0e9b3fd0d9820a37c73880fd582726afcf28c7eddb1b6771d9

    • SHA512

      b5bf0f7d2508798685e6673fdc0e10604d07cb7a484bdfa0f1f06fdfeafb01a57c34a934d94e83b0e2e75dd5274681ffbe8835a073704f49d1742154cc6073f9

    • SSDEEP

      6144:RqKB+tOkWKR0iJ0MnW5NqKB+tOkWKR0iJ0MnW5x:v4Hnc4HnG

    Score
    9/10
    discoveryransomware

    • Renames multiple (2731) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks