8344927d852d859f93a8eb0058545e279bded706b681dabb0af53b7e4b42825d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d23bc0c12d2ddc0766a5ed61b04690a0N.exe
Size

107KB
Sample

240904-brplzatdkb
MD5

d23bc0c12d2ddc0766a5ed61b04690a0
SHA1

828361a7b0b488d7197f28fa01668926b6cc68d7
SHA256

8344927d852d859f93a8eb0058545e279bded706b681dabb0af53b7e4b42825d
SHA512

bc110e67ad91c53a95619e1e228bbf0d658fa72ab6dd0e78a3e0f262ab033fc4d90bad230930b8f02e9b0fe26a5da4a851d4be5d89e42457f58f19d3b945d0ec
SSDEEP

1536:W7Z2sspAp5YSfffyneKIKWQyWE7Z2sspAp5YSfffyneKIKWQyWJ63:62ssWpKneKIKM2ssWpKneKIK6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d23bc0c12d2ddc0766a5ed61b04690a0N.exe
- Size
  
  107KB
- MD5
  
  d23bc0c12d2ddc0766a5ed61b04690a0
- SHA1
  
  828361a7b0b488d7197f28fa01668926b6cc68d7
- SHA256
  
  8344927d852d859f93a8eb0058545e279bded706b681dabb0af53b7e4b42825d
- SHA512
  
  bc110e67ad91c53a95619e1e228bbf0d658fa72ab6dd0e78a3e0f262ab033fc4d90bad230930b8f02e9b0fe26a5da4a851d4be5d89e42457f58f19d3b945d0ec
- SSDEEP
  
  1536:W7Z2sspAp5YSfffyneKIKWQyWE7Z2sspAp5YSfffyneKIKWQyWJ63:62ssWpKneKIKM2ssWpKneKIK6
Score

9^/10

discovery ransomware
- Renames multiple (4193) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware