79a0c707f08e9d778d7ae7c6df03a285a8b6290adc0b44a711fcdda93254478c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3849f638766cf9259ca0bc848236e0f0N.exe
Size

87KB
Sample

240902-n6g7nazbpr
MD5

3849f638766cf9259ca0bc848236e0f0
SHA1

9e8909df92d3bb40b8fd00baa72168a3174ca799
SHA256

79a0c707f08e9d778d7ae7c6df03a285a8b6290adc0b44a711fcdda93254478c
SHA512

9045989b258015a5d33bcd2fa8d3a4b0de84506042bb363e529796802cc1748fd77e8eef58187362830601589566623bce71a68e950ce55b6c70a96dbfadfae1
SSDEEP

1536:/7ZQpAp3vzfxRfxuY77ZQpAp3vzfxRfxuY3m:9QWp3vzf7fgYZQWp3vzf7fgY2

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3849f638766cf9259ca0bc848236e0f0N.exe
- Size
  
  87KB
- MD5
  
  3849f638766cf9259ca0bc848236e0f0
- SHA1
  
  9e8909df92d3bb40b8fd00baa72168a3174ca799
- SHA256
  
  79a0c707f08e9d778d7ae7c6df03a285a8b6290adc0b44a711fcdda93254478c
- SHA512
  
  9045989b258015a5d33bcd2fa8d3a4b0de84506042bb363e529796802cc1748fd77e8eef58187362830601589566623bce71a68e950ce55b6c70a96dbfadfae1
- SSDEEP
  
  1536:/7ZQpAp3vzfxRfxuY77ZQpAp3vzfxRfxuY3m:9QWp3vzf7fgYZQWp3vzf7fgY2
Score

9^/10

discovery ransomware
- Renames multiple (4793) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware