f68dc2f924151bd52da148b3ac91b78d6ced5665253557431aebbf248d6b0da1 | Triage

Sharing

General

Target

9ef28d19e1b6ae90fec52cee7a9aefb0N.exe
Size

95KB
Sample

240904-pash7a1dka
MD5

9ef28d19e1b6ae90fec52cee7a9aefb0
SHA1

34186e68b282eb396a36ea0384f63625846ae1cc
SHA256

f68dc2f924151bd52da148b3ac91b78d6ced5665253557431aebbf248d6b0da1
SHA512

091c073945b8469e8acefe85db891a0d6e29b410fcbd2343504184db6393fd954ebaeaabaf83c7852344094cf191528c80c76e2c5d3841262a8812b9b80864e9
SSDEEP

1536:W7ZppApBULcfpHLcfpyDA6swXwA7ZppApBULcfpHLcfpyDA6swXwsWx:6pWpBwchcwD8wXwApWpBwchcwD8wXwT

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9ef28d19e1b6ae90fec52cee7a9aefb0N.exe
- Size
  
  95KB
- MD5
  
  9ef28d19e1b6ae90fec52cee7a9aefb0
- SHA1
  
  34186e68b282eb396a36ea0384f63625846ae1cc
- SHA256
  
  f68dc2f924151bd52da148b3ac91b78d6ced5665253557431aebbf248d6b0da1
- SHA512
  
  091c073945b8469e8acefe85db891a0d6e29b410fcbd2343504184db6393fd954ebaeaabaf83c7852344094cf191528c80c76e2c5d3841262a8812b9b80864e9
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyDA6swXwA7ZppApBULcfpHLcfpyDA6swXwsWx:6pWpBwchcwD8wXwApWpBwchcwD8wXwT
Score

9^/10

discovery ransomware
- Renames multiple (4278) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware