b74603b19bbadc5d82bd0e340ed6681922af0e609230cf9f413ef37f1be49b34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9161d06624af3f20101fbae5bfe8e800N.exe
Size

68KB
Sample

240820-av3sbsybjm
MD5

9161d06624af3f20101fbae5bfe8e800
SHA1

c4953a2d0daa5a3d5544a88626dc0ffa7f0bf2df
SHA256

b74603b19bbadc5d82bd0e340ed6681922af0e609230cf9f413ef37f1be49b34
SHA512

8774e94db9209111822349b66649f9228798da6dabe432a1c8e04b006aefdea0deaf6c0685ad3b135d4ea70f1ea510c56037e05508a2ffaa7f30aa12fa5cf216
SSDEEP

768:W7BlpppARFbhjbhPKueKudLw1i7BlpppARFbhjbhPKueKudLw1U:W7ZppApB7g7ZppApB7K

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9161d06624af3f20101fbae5bfe8e800N.exe
- Size
  
  68KB
- MD5
  
  9161d06624af3f20101fbae5bfe8e800
- SHA1
  
  c4953a2d0daa5a3d5544a88626dc0ffa7f0bf2df
- SHA256
  
  b74603b19bbadc5d82bd0e340ed6681922af0e609230cf9f413ef37f1be49b34
- SHA512
  
  8774e94db9209111822349b66649f9228798da6dabe432a1c8e04b006aefdea0deaf6c0685ad3b135d4ea70f1ea510c56037e05508a2ffaa7f30aa12fa5cf216
- SSDEEP
  
  768:W7BlpppARFbhjbhPKueKudLw1i7BlpppARFbhjbhPKueKudLw1U:W7ZppApB7g7ZppApB7K
Score

9^/10

discovery ransomware
- Renames multiple (3598) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware