Overview

overview

9

Static

static

3

76dbdc0d88...0N.exe

windows7-x64

9

76dbdc0d88...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    76dbdc0d8803e7ad7d9c4f86a8902810N.exe

  • Size

    172KB

  • Sample

    240823-r6nk8asgpl

  • MD5

    76dbdc0d8803e7ad7d9c4f86a8902810

  • SHA1

    ad93b94bc9d4e72e11bda5a42d4eae34919ebd43

  • SHA256

    65fd35393f5b564051250659bb37ca7a58571d4052218e2ee9e0c7bb036d8196

  • SHA512

    c1425057f8be1c8898ca498debf628eac518f66d64c91956f66c51db4fd69dc246858acbbd2f8921d7d5126e5b8b95844f4c43b28ae0e25a2397b7269e1d5f6d

  • SSDEEP

    1536:/7ZQpAp/Eaiau3NIw3NIQ7ZQpAp/Eaiau3NIw3NIK:9QWpEQWp+

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      76dbdc0d8803e7ad7d9c4f86a8902810N.exe

    • Size

      172KB

    • MD5

      76dbdc0d8803e7ad7d9c4f86a8902810

    • SHA1

      ad93b94bc9d4e72e11bda5a42d4eae34919ebd43

    • SHA256

      65fd35393f5b564051250659bb37ca7a58571d4052218e2ee9e0c7bb036d8196

    • SHA512

      c1425057f8be1c8898ca498debf628eac518f66d64c91956f66c51db4fd69dc246858acbbd2f8921d7d5126e5b8b95844f4c43b28ae0e25a2397b7269e1d5f6d

    • SSDEEP

      1536:/7ZQpAp/Eaiau3NIw3NIQ7ZQpAp/Eaiau3NIw3NIK:9QWpEQWp+

    Score
    9/10
    discoveryransomware

    • Renames multiple (3549) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks