02687f33585358d7753088fed2a4aa64d5d485ef2f803f330a753907bb0762db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d7ebd304d4546a70b2dc5f32575d430N.exe
Size

154KB
Sample

240825-1k92rsybrk
MD5

3d7ebd304d4546a70b2dc5f32575d430
SHA1

171b8cdb06f3f2cad1dd7c465e09edc4c024f702
SHA256

02687f33585358d7753088fed2a4aa64d5d485ef2f803f330a753907bb0762db
SHA512

234b1abf0bbf93213e39e3fc23bca7b8081fe51679555553d4a52643434c238720d323b5a813e669d3176d1cc35a733ecb6b75267ef748513d6332c3cc44b8c6
SSDEEP

1536:/7ZQpAp+KBpbNiBIUkUG7ZQpAp+KBpbNiBIUkU+RC:9QWp+KBpbNiBmQWp+KBpbNiB5

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3d7ebd304d4546a70b2dc5f32575d430N.exe
- Size
  
  154KB
- MD5
  
  3d7ebd304d4546a70b2dc5f32575d430
- SHA1
  
  171b8cdb06f3f2cad1dd7c465e09edc4c024f702
- SHA256
  
  02687f33585358d7753088fed2a4aa64d5d485ef2f803f330a753907bb0762db
- SHA512
  
  234b1abf0bbf93213e39e3fc23bca7b8081fe51679555553d4a52643434c238720d323b5a813e669d3176d1cc35a733ecb6b75267ef748513d6332c3cc44b8c6
- SSDEEP
  
  1536:/7ZQpAp+KBpbNiBIUkUG7ZQpAp+KBpbNiBIUkU+RC:9QWp+KBpbNiBmQWp+KBpbNiB5
Score

9^/10

discovery ransomware
- Renames multiple (3473) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware