Overview

overview

9

Static

static

3

90a9ffb263...0N.exe

windows7-x64

9

90a9ffb263...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    90a9ffb263142704ece7bf3a0bb7b470N.exe

  • Size

    162KB

  • Sample

    240902-3nrqps1hkg

  • MD5

    90a9ffb263142704ece7bf3a0bb7b470

  • SHA1

    754d6479f05698e2a74d0a83fb5b4cbd8c72a616

  • SHA256

    b739a2e179f79cff2fc3860cf23032a0fced150a78907a5a172639e88736823c

  • SHA512

    39b5ec205044f98ffa44c891ab2b8dee3aab0b4860fbdf541ee424b9aa7c4270df6c54a7e9a6926fbf94b8c363f5578b0096a514dc81e2f29a2375a07d842267

  • SSDEEP

    1536:/7ZQpAp/6Y7oIpu2+7ZQpAp/6Y7oIpu2+NoNf:9QWpQ2iQWpQ2l

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      90a9ffb263142704ece7bf3a0bb7b470N.exe

    • Size

      162KB

    • MD5

      90a9ffb263142704ece7bf3a0bb7b470

    • SHA1

      754d6479f05698e2a74d0a83fb5b4cbd8c72a616

    • SHA256

      b739a2e179f79cff2fc3860cf23032a0fced150a78907a5a172639e88736823c

    • SHA512

      39b5ec205044f98ffa44c891ab2b8dee3aab0b4860fbdf541ee424b9aa7c4270df6c54a7e9a6926fbf94b8c363f5578b0096a514dc81e2f29a2375a07d842267

    • SSDEEP

      1536:/7ZQpAp/6Y7oIpu2+7ZQpAp/6Y7oIpu2+NoNf:9QWpQ2iQWpQ2l

    Score
    9/10
    discoveryransomware

    • Renames multiple (4183) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks