8aee21cff79f97303bebffc9b404865817f0a317ded43c28e31f535f02c2324c | Triage

Sharing

General

Target

9efc72f6e2a3ece2a6389a9a0c7a1500N.exe
Size

182KB
Sample

240829-rse2xsybmm
MD5

9efc72f6e2a3ece2a6389a9a0c7a1500
SHA1

63cbaef6ce2f35084b5daf45a65bc52a36220469
SHA256

8aee21cff79f97303bebffc9b404865817f0a317ded43c28e31f535f02c2324c
SHA512

7e863f6bff2d937782ba8a62d2907207b17c4d9019b5093ee8b2a5d25c79f25297dc41005fb90a524b6e7235c1006134af504f6b73f209fed3c8138f4969b16c
SSDEEP

1536:W7ZhA7pApH9QHwtRF9qaRjvmujvmRzqzlmJgwmJg/Sj7ZhA7pApH9QHwtRF9qaRi:6e7WpHIyRF9041qwe7WpHIyRF9041qj

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9efc72f6e2a3ece2a6389a9a0c7a1500N.exe
- Size
  
  182KB
- MD5
  
  9efc72f6e2a3ece2a6389a9a0c7a1500
- SHA1
  
  63cbaef6ce2f35084b5daf45a65bc52a36220469
- SHA256
  
  8aee21cff79f97303bebffc9b404865817f0a317ded43c28e31f535f02c2324c
- SHA512
  
  7e863f6bff2d937782ba8a62d2907207b17c4d9019b5093ee8b2a5d25c79f25297dc41005fb90a524b6e7235c1006134af504f6b73f209fed3c8138f4969b16c
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9qaRjvmujvmRzqzlmJgwmJg/Sj7ZhA7pApH9QHwtRF9qaRi:6e7WpHIyRF9041qwe7WpHIyRF9041qj
Score

9^/10

discovery ransomware
- Renames multiple (343) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware