5c72f4c165a3bafe4c6165f3a3d68091dce5bf2d1555d907279cdbe46cd675a2 | Triage

Sharing

General

Target

fbc9eb7f7d30ad0cdb668e64d22d2570N.exe
Size

93KB
Sample

240824-p6r8as1cre
MD5

fbc9eb7f7d30ad0cdb668e64d22d2570
SHA1

4ad5afb76aa4f524b6893e6fdbd5c527069b148b
SHA256

5c72f4c165a3bafe4c6165f3a3d68091dce5bf2d1555d907279cdbe46cd675a2
SHA512

1b4ec9315e0db3f70ff86b844b51c4c93e3f799e2c09c8d9c0104d352e6619d3c2e7ad99a034fde9e8f24d2a82d1d98c0c0cca38767958d39bb6b1703ef51571
SSDEEP

1536:W7ZppApBULcfpHLcfpyD9uH9uH2877ZppApBULcfpHLcfpyD9uH9uH28iKx:6pWpBwchcwD9uduW8ZpWpBwchcwD9udy

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fbc9eb7f7d30ad0cdb668e64d22d2570N.exe
- Size
  
  93KB
- MD5
  
  fbc9eb7f7d30ad0cdb668e64d22d2570
- SHA1
  
  4ad5afb76aa4f524b6893e6fdbd5c527069b148b
- SHA256
  
  5c72f4c165a3bafe4c6165f3a3d68091dce5bf2d1555d907279cdbe46cd675a2
- SHA512
  
  1b4ec9315e0db3f70ff86b844b51c4c93e3f799e2c09c8d9c0104d352e6619d3c2e7ad99a034fde9e8f24d2a82d1d98c0c0cca38767958d39bb6b1703ef51571
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyD9uH9uH2877ZppApBULcfpHLcfpyD9uH9uH28iKx:6pWpBwchcwD9uduW8ZpWpBwchcwD9udy
Score

9^/10

discovery ransomware
- Renames multiple (4335) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware