a28b218441ec48ac6e52b13ab43f779162fdac0a0718814111e5e1a09f6b9dc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1f7353b830a7a4d4315763f877f5b0N.exe
Size

109KB
Sample

240903-23mjvszcpj
MD5

3e1f7353b830a7a4d4315763f877f5b0
SHA1

7f5e45738a0bd1a4e1294308fea25b8122071c4d
SHA256

a28b218441ec48ac6e52b13ab43f779162fdac0a0718814111e5e1a09f6b9dc8
SHA512

cf4f3797be1eda872769c219871427c682a9ed96fbc6b573b35144d20811ff03d6c79bc67766c295cc8a644887fceb524ca26f6bb00027abe1725e654a5850c8
SSDEEP

1536:W7Z2sspAp5YSfffyneKIKWQyWh7Z2sspAp5YSfffyneKIKWQyW2:62ssWpKneKIKD2ssWpKneKIKO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3e1f7353b830a7a4d4315763f877f5b0N.exe
- Size
  
  109KB
- MD5
  
  3e1f7353b830a7a4d4315763f877f5b0
- SHA1
  
  7f5e45738a0bd1a4e1294308fea25b8122071c4d
- SHA256
  
  a28b218441ec48ac6e52b13ab43f779162fdac0a0718814111e5e1a09f6b9dc8
- SHA512
  
  cf4f3797be1eda872769c219871427c682a9ed96fbc6b573b35144d20811ff03d6c79bc67766c295cc8a644887fceb524ca26f6bb00027abe1725e654a5850c8
- SSDEEP
  
  1536:W7Z2sspAp5YSfffyneKIKWQyWh7Z2sspAp5YSfffyneKIKWQyW2:62ssWpKneKIKD2ssWpKneKIKO
Score

9^/10

discovery ransomware
- Renames multiple (4161) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware