03b264c56773c4a06cb88ac8aceca193eea2b4fe1d80dd87fef85211c4c32acf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4039cf309721cdb21c98c3a96edfb560N.exe
Size

94KB
Sample

240828-2kxxwazfja
MD5

4039cf309721cdb21c98c3a96edfb560
SHA1

e2786ece185da3164bfecbabbd52df2b96d2467c
SHA256

03b264c56773c4a06cb88ac8aceca193eea2b4fe1d80dd87fef85211c4c32acf
SHA512

4534c2ed43a55a1315afaf6a349cf8f0e8dd344858226ab34fa05f7ff817e7aa28312c9c054ee6daba3254d30bba5d16be35c225a0f069775d5517928761f7e3
SSDEEP

1536:W7ZppApkGpJHkAHA97ZppApkGpJHkAHAzY6IY6K:6pWpkGpMpWpkGpa2U

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4039cf309721cdb21c98c3a96edfb560N.exe
- Size
  
  94KB
- MD5
  
  4039cf309721cdb21c98c3a96edfb560
- SHA1
  
  e2786ece185da3164bfecbabbd52df2b96d2467c
- SHA256
  
  03b264c56773c4a06cb88ac8aceca193eea2b4fe1d80dd87fef85211c4c32acf
- SHA512
  
  4534c2ed43a55a1315afaf6a349cf8f0e8dd344858226ab34fa05f7ff817e7aa28312c9c054ee6daba3254d30bba5d16be35c225a0f069775d5517928761f7e3
- SSDEEP
  
  1536:W7ZppApkGpJHkAHA97ZppApkGpJHkAHAzY6IY6K:6pWpkGpMpWpkGpa2U
Score

9^/10

discovery ransomware
- Renames multiple (4239) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware