Overview

overview

9

Static

static

3

9e28b41f93...0N.exe

windows7-x64

9

9e28b41f93...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    9e28b41f93990e4cafba237013c9a7d0N

  • Size

    139KB

  • Sample

    240826-d5wnjsthjk

  • MD5

    9e28b41f93990e4cafba237013c9a7d0

  • SHA1

    69a17a2426bfd31cc6bddf12c4ad979e476d49f9

  • SHA256

    ac763f6ad49d04f9f2ca64734d187dac4c572dd57d0a9059e5d7b07a3b952d4b

  • SHA512

    ca50ccbb7a7759bdf585f97c6526112fb7ac6fe0c92f6292be504a9ef97f2902ee37927f34f5ec95f5e9f840de58438c5abe7a48e6e6eaeca0b883a09f4f969d

  • SSDEEP

    3072:6pWpUnDXxXb9j+9jGpWpUnDXxXb9j+9jY:PWnDhcWnDhx

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      9e28b41f93990e4cafba237013c9a7d0N

    • Size

      139KB

    • MD5

      9e28b41f93990e4cafba237013c9a7d0

    • SHA1

      69a17a2426bfd31cc6bddf12c4ad979e476d49f9

    • SHA256

      ac763f6ad49d04f9f2ca64734d187dac4c572dd57d0a9059e5d7b07a3b952d4b

    • SHA512

      ca50ccbb7a7759bdf585f97c6526112fb7ac6fe0c92f6292be504a9ef97f2902ee37927f34f5ec95f5e9f840de58438c5abe7a48e6e6eaeca0b883a09f4f969d

    • SSDEEP

      3072:6pWpUnDXxXb9j+9jGpWpUnDXxXb9j+9jY:PWnDhcWnDhx

    Score
    9/10
    discoveryransomware

    • Renames multiple (4845) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks