Overview

overview

9

Static

static

3

cffc7fce6a...0N.exe

windows7-x64

9

cffc7fce6a...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cffc7fce6a078b0c7e5487f2397e5790N.exe

  • Size

    57KB

  • Sample

    240905-prp5ds1bpl

  • MD5

    cffc7fce6a078b0c7e5487f2397e5790

  • SHA1

    9ca1158c703cc06a789437b860f7ae6759c88bc0

  • SHA256

    5cb3188422454df237c2793c39032b6ae47f68198d0f039aa01501eff69b0f24

  • SHA512

    c68126d9e1190d1ef6c0a6b8c195d7219101cbada7e98c0883cb91cd6a1dbdba0a25cfc17d478dae44fdfdf18f2eeda9d2e90512183bbdd6a1cd29c97d94cd5b

  • SSDEEP

    768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJl5H5NbJtZbJtt:W7ZppApyVyjVyv5H59Zt

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      cffc7fce6a078b0c7e5487f2397e5790N.exe

    • Size

      57KB

    • MD5

      cffc7fce6a078b0c7e5487f2397e5790

    • SHA1

      9ca1158c703cc06a789437b860f7ae6759c88bc0

    • SHA256

      5cb3188422454df237c2793c39032b6ae47f68198d0f039aa01501eff69b0f24

    • SHA512

      c68126d9e1190d1ef6c0a6b8c195d7219101cbada7e98c0883cb91cd6a1dbdba0a25cfc17d478dae44fdfdf18f2eeda9d2e90512183bbdd6a1cd29c97d94cd5b

    • SSDEEP

      768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJl5H5NbJtZbJtt:W7ZppApyVyjVyv5H59Zt

    Score
    9/10
    discoveryransomware

    • Renames multiple (3206) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks