2171d6fe2a108d88356b0ae4d31cec682c6fbc5a310e1dc45c6bcdea1c07a161 | Triage

Sharing

General

Target

11059908e9dd3ec652528d8945ca9200N.exe
Size

98KB
Sample

240821-rd6w4asdqc
MD5

11059908e9dd3ec652528d8945ca9200
SHA1

82d4717800a7368f5200d77036a118eee4e6bb66
SHA256

2171d6fe2a108d88356b0ae4d31cec682c6fbc5a310e1dc45c6bcdea1c07a161
SHA512

795fffef960ef1a65e0237c3e35df5abb3c6e521110b275c5d1f9d361abe9e5d3448a82b439fa069a4fa86afedf20c35f6db6ad62027ce23fbc9ce3e0b9dc037
SSDEEP

1536:W7Z2sspAp5YSfffyneKIKe7Z2sspAp5YSfffyneKIKm:62ssWpKneKIKC2ssWpKneKIKm

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  11059908e9dd3ec652528d8945ca9200N.exe
- Size
  
  98KB
- MD5
  
  11059908e9dd3ec652528d8945ca9200
- SHA1
  
  82d4717800a7368f5200d77036a118eee4e6bb66
- SHA256
  
  2171d6fe2a108d88356b0ae4d31cec682c6fbc5a310e1dc45c6bcdea1c07a161
- SHA512
  
  795fffef960ef1a65e0237c3e35df5abb3c6e521110b275c5d1f9d361abe9e5d3448a82b439fa069a4fa86afedf20c35f6db6ad62027ce23fbc9ce3e0b9dc037
- SSDEEP
  
  1536:W7Z2sspAp5YSfffyneKIKe7Z2sspAp5YSfffyneKIKm:62ssWpKneKIKC2ssWpKneKIKm
Score

9^/10

discovery ransomware
- Renames multiple (4276) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware