Overview

overview

9

Static

static

3

d3c78b5814...0N.exe

windows7-x64

9

d3c78b5814...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3c78b581424bfc696eb67731bf5e950N.exe

  • Size

    137KB

  • Sample

    240914-abr7gswekn

  • MD5

    d3c78b581424bfc696eb67731bf5e950

  • SHA1

    cf8fdbf415d39708a831d6c0f20d430d7dac3526

  • SHA256

    47d639fa05ad5d60df526240fa28f7a98a4d75d62ce0cb5cd5793d86e6b0f267

  • SHA512

    6cdbe1b5f71c36b3bcd79f7ccaa96f3bad3d469c0e88ba0eb3a8513b7164fd53b1280339290637e967ad2d20d476e624606ce950c01ac7579875798af25d28db

  • SSDEEP

    3072:6pWpBwchcV2WxOORnORPpWpBwchcV2WxOORnORn:PM2mM2l

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      d3c78b581424bfc696eb67731bf5e950N.exe

    • Size

      137KB

    • MD5

      d3c78b581424bfc696eb67731bf5e950

    • SHA1

      cf8fdbf415d39708a831d6c0f20d430d7dac3526

    • SHA256

      47d639fa05ad5d60df526240fa28f7a98a4d75d62ce0cb5cd5793d86e6b0f267

    • SHA512

      6cdbe1b5f71c36b3bcd79f7ccaa96f3bad3d469c0e88ba0eb3a8513b7164fd53b1280339290637e967ad2d20d476e624606ce950c01ac7579875798af25d28db

    • SSDEEP

      3072:6pWpBwchcV2WxOORnORPpWpBwchcV2WxOORnORn:PM2mM2l

    Score
    9/10
    discoveryransomware

    • Renames multiple (3533) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks