dac34249fa91b503d867f80532b5668b1eb77d287280fde78adf190cdc6e25ff | Triage

Sharing

General

Target

25a1f96cc4cf184665f6ec4bd9641be0N.exe
Size

99KB
Sample

240829-q7pz1axann
MD5

25a1f96cc4cf184665f6ec4bd9641be0
SHA1

5ce60811a9f8d8dd88c8407e76df197ec5541633
SHA256

dac34249fa91b503d867f80532b5668b1eb77d287280fde78adf190cdc6e25ff
SHA512

f8a9067715249d388935ba490545ee9e076067683dfa18bf8e2fa6cb9435ff7060f8bd96552657c3fab3d56177ecc50e890eb15412da73b2b2aa598274abbc98
SSDEEP

1536:W7ZppApBULcfpHLcfpyDA6Xef07ZppApBULcfpHLcfpyDA6XefF:6pWpBwchcwDnef0pWpBwchcwDnefF

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  25a1f96cc4cf184665f6ec4bd9641be0N.exe
- Size
  
  99KB
- MD5
  
  25a1f96cc4cf184665f6ec4bd9641be0
- SHA1
  
  5ce60811a9f8d8dd88c8407e76df197ec5541633
- SHA256
  
  dac34249fa91b503d867f80532b5668b1eb77d287280fde78adf190cdc6e25ff
- SHA512
  
  f8a9067715249d388935ba490545ee9e076067683dfa18bf8e2fa6cb9435ff7060f8bd96552657c3fab3d56177ecc50e890eb15412da73b2b2aa598274abbc98
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyDA6Xef07ZppApBULcfpHLcfpyDA6XefF:6pWpBwchcwDnef0pWpBwchcwDnefF
Score

9^/10

discovery ransomware
- Renames multiple (4205) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware