dc5d5d58abadc4acfef00bd0c600041a9d92af95d37d46c7ec2271666111dcda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a4cf5a8aef78d23eb14b05afff6c3c0N.exe
Size

216KB
Sample

240901-hte9msvdqf
MD5

8a4cf5a8aef78d23eb14b05afff6c3c0
SHA1

71ec86c62b958ed179d37f8d0ed7fb8f50cb7e9e
SHA256

dc5d5d58abadc4acfef00bd0c600041a9d92af95d37d46c7ec2271666111dcda
SHA512

60ad702051ed32f00f74a866029a76cb80efb07478c919f2de6ae4309c652c0add677cbc9ee78e8e15771714332f33375ea49b8aa53c3c0dd28eea278f1b9763
SSDEEP

6144:RqKvb0CYJ973e+eKZ0VfkJYoAJYosqKvb0CYJ973e+eKZ0VfkJYoAJYoC:vvbxYX7Z0VfkJYoAJYoQvbxYX7Z0Vfkv

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8a4cf5a8aef78d23eb14b05afff6c3c0N.exe
- Size
  
  216KB
- MD5
  
  8a4cf5a8aef78d23eb14b05afff6c3c0
- SHA1
  
  71ec86c62b958ed179d37f8d0ed7fb8f50cb7e9e
- SHA256
  
  dc5d5d58abadc4acfef00bd0c600041a9d92af95d37d46c7ec2271666111dcda
- SHA512
  
  60ad702051ed32f00f74a866029a76cb80efb07478c919f2de6ae4309c652c0add677cbc9ee78e8e15771714332f33375ea49b8aa53c3c0dd28eea278f1b9763
- SSDEEP
  
  6144:RqKvb0CYJ973e+eKZ0VfkJYoAJYosqKvb0CYJ973e+eKZ0VfkJYoAJYoC:vvbxYX7Z0VfkJYoAJYoQvbxYX7Z0Vfkv
Score

9^/10

discovery ransomware
- Renames multiple (2925) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware