49b22515b9cf46ff541528c5307aeac15a75baf23320fb0cef2dd481510b31df | Triage

Sharing

General

Target

4781efc86e952bbf1e17f8e380f1c700N.exe
Size

88KB
Sample

240901-pap33azhra
MD5

4781efc86e952bbf1e17f8e380f1c700
SHA1

4840d98a5583274b937f2c9e34b29b990f11bc46
SHA256

49b22515b9cf46ff541528c5307aeac15a75baf23320fb0cef2dd481510b31df
SHA512

0753cdc1abc6d6b6d046bbe768e38c47b1cf0dd5006bfc6efef78947588e16be424ce2d81516e139f9c862cd13ddf5e4ff3d8a7d53b6be1a06f8cb855c67c9a4
SSDEEP

1536:W7Z2sspAp5YSfffynKDkEDkHC7Z2sspAp5YSfffynKDkEDkHwI:62ssWpKnD1m2ssWpKnD1QI

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4781efc86e952bbf1e17f8e380f1c700N.exe
- Size
  
  88KB
- MD5
  
  4781efc86e952bbf1e17f8e380f1c700
- SHA1
  
  4840d98a5583274b937f2c9e34b29b990f11bc46
- SHA256
  
  49b22515b9cf46ff541528c5307aeac15a75baf23320fb0cef2dd481510b31df
- SHA512
  
  0753cdc1abc6d6b6d046bbe768e38c47b1cf0dd5006bfc6efef78947588e16be424ce2d81516e139f9c862cd13ddf5e4ff3d8a7d53b6be1a06f8cb855c67c9a4
- SSDEEP
  
  1536:W7Z2sspAp5YSfffynKDkEDkHC7Z2sspAp5YSfffynKDkEDkHwI:62ssWpKnD1m2ssWpKnD1QI
Score

9^/10

discovery ransomware
- Renames multiple (4494) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware