ee254ea359c686ef7a98e6b70c5cedf4926d30d93a8c8467701d7baf50d54a0c | Triage

Sharing

General

Target

20d33596125ac2b7c2cd59638a4042a0N.exe
Size

94KB
Sample

240820-dlgqaa1anb
MD5

20d33596125ac2b7c2cd59638a4042a0
SHA1

8874fbe2a1bbe0ba6d3cba91d1d731771225b668
SHA256

ee254ea359c686ef7a98e6b70c5cedf4926d30d93a8c8467701d7baf50d54a0c
SHA512

46932243dca9d01d30c9f898d97043a4784888dc1732a5e0eb167cc2a887dd2bd450d207f81e0e6227ec732c5fe84fc20a0694d6f5925b54752001ac57c80cdf
SSDEEP

1536:W7Z2sspAp5YSfffyneKIKWQN7Z2sspAp5YSfffyneKIKWQxfo:62ssWpKneKIKD2ssWpKneKIKK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  20d33596125ac2b7c2cd59638a4042a0N.exe
- Size
  
  94KB
- MD5
  
  20d33596125ac2b7c2cd59638a4042a0
- SHA1
  
  8874fbe2a1bbe0ba6d3cba91d1d731771225b668
- SHA256
  
  ee254ea359c686ef7a98e6b70c5cedf4926d30d93a8c8467701d7baf50d54a0c
- SHA512
  
  46932243dca9d01d30c9f898d97043a4784888dc1732a5e0eb167cc2a887dd2bd450d207f81e0e6227ec732c5fe84fc20a0694d6f5925b54752001ac57c80cdf
- SSDEEP
  
  1536:W7Z2sspAp5YSfffyneKIKWQN7Z2sspAp5YSfffyneKIKWQxfo:62ssWpKneKIKD2ssWpKneKIKK
Score

9^/10

discovery ransomware
- Renames multiple (4771) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware