58072cea03ae9046d48fdcd6a649150e2ae220bfdd5ea6fac43946684944d7a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83059fdfcfeb45db3da7b2a38d089990N.exe
Size

175KB
Sample

240824-rd3jnstclc
MD5

83059fdfcfeb45db3da7b2a38d089990
SHA1

6facaeed9cb17b954cc0cf8a0632d1eea6fb083f
SHA256

58072cea03ae9046d48fdcd6a649150e2ae220bfdd5ea6fac43946684944d7a6
SHA512

c3d7148e041e49880528ad78d46f980812aa9368779b92b065a0cc935339653af576da66e28386c84540e81acdc7ba8ab78a972b74c63662199db5735882d009
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eBSWSYGe7WpMaxeb0CYJ97lEYNR73e+eBSWSYb:RqKvb0CYJ973e+eBSCqKvb0CYJ973e+G

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  83059fdfcfeb45db3da7b2a38d089990N.exe
- Size
  
  175KB
- MD5
  
  83059fdfcfeb45db3da7b2a38d089990
- SHA1
  
  6facaeed9cb17b954cc0cf8a0632d1eea6fb083f
- SHA256
  
  58072cea03ae9046d48fdcd6a649150e2ae220bfdd5ea6fac43946684944d7a6
- SHA512
  
  c3d7148e041e49880528ad78d46f980812aa9368779b92b065a0cc935339653af576da66e28386c84540e81acdc7ba8ab78a972b74c63662199db5735882d009
- SSDEEP
  
  3072:6e7WpMaxeb0CYJ97lEYNR73e+eBSWSYGe7WpMaxeb0CYJ97lEYNR73e+eBSWSYb:RqKvb0CYJ973e+eBSCqKvb0CYJ973e+G
Score

9^/10

discovery ransomware
- Renames multiple (323) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware